sbsm 1.0.5 → 1.0.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
data/History.txt CHANGED
@@ -1,3 +1,13 @@
1
+ === 1.0.6 / 20.01.2012
2
+
3
+ * Added untaint to __FILE__ and request.server.document_root in trans_handler.rb
4
+ * this is to get rid of the Ruby 1.9.3* error when mod_ruby is compiled against
5
+ * Ruby 1.9.3
6
+
7
+ mod_ruby:
8
+ /usr/local/lib64/ruby/gems/1.9.1/gems/sbsm-1.0.5/lib/sbsm/trans_handler.rb:21:in
9
+ `expand_path': Insecure operation - expand_path (SecurityError)
10
+
1
11
  === 1.0.5 / 17.01.2012
2
12
 
3
13
  * Removed redefine_19_cookie.rb
data/lib/sbsm/index.rb CHANGED
@@ -23,7 +23,7 @@
23
23
  # Index -- sbsm -- 04.03.2003 -- hwyss@ywesee.com
24
24
 
25
25
  module SBSM
26
- VERSION = '1.0.5'
26
+ VERSION = '1.0.6'
27
27
  class Index
28
28
  def initialize
29
29
  @values = []
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env ruby
2
- # SBSM::TransHandler -- sbsm -- 16.01.2012 -- mhatakeyama@ywesee.com
2
+ # SBSM::TransHandler -- sbsm -- 20.01.2012 -- mhatakeyama@ywesee.com
3
3
  # SBSM::TransHandler -- sbsm -- 23.09.2004 -- hwyss@ywesee.com
4
4
 
5
5
  $USING_STRSCAN = true
@@ -19,14 +19,14 @@ module SBSM
19
19
  @parser_name = name
20
20
  @parser_method = "_#{name}_parser"
21
21
  @grammar_path = File.expand_path("../../data/#{name}.grammar",
22
- File.dirname(__FILE__))
22
+ File.dirname(__FILE__.untaint))
23
23
  @parser_path = File.expand_path("#{name}_parser.rb",
24
- File.dirname(__FILE__))
24
+ File.dirname(__FILE__.untaint))
25
25
  end
26
26
  def config(request)
27
27
  config = Hash.new { {} }
28
28
  begin
29
- path = File.expand_path(CONFIG_PATH, request.server.document_root)
29
+ path = File.expand_path(CONFIG_PATH, request.server.document_root.untaint)
30
30
  path.untaint
31
31
  config.update(YAML.load(File.read(path)))
32
32
  config
metadata CHANGED
@@ -1,12 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sbsm
3
3
  version: !ruby/object:Gem::Version
4
- prerelease: false
4
+ hash: 27
5
+ prerelease:
5
6
  segments:
6
7
  - 1
7
8
  - 0
8
- - 5
9
- version: 1.0.5
9
+ - 6
10
+ version: 1.0.6
10
11
  platform: ruby
11
12
  authors:
12
13
  - Masaomi Hatakeyama, Zeno R.R. Davatz
@@ -14,23 +15,38 @@ autorequire:
14
15
  bindir: bin
15
16
  cert_chain: []
16
17
 
17
- date: 2012-01-17 00:00:00 +01:00
18
- default_executable:
18
+ date: 2012-01-20 00:00:00 Z
19
19
  dependencies:
20
20
  - !ruby/object:Gem::Dependency
21
- name: hoe
21
+ name: rdoc
22
22
  prerelease: false
23
23
  requirement: &id001 !ruby/object:Gem::Requirement
24
+ none: false
24
25
  requirements:
25
- - - ">="
26
+ - - ~>
26
27
  - !ruby/object:Gem::Version
28
+ hash: 19
27
29
  segments:
28
- - 2
29
- - 9
30
- - 1
31
- version: 2.9.1
30
+ - 3
31
+ - 10
32
+ version: "3.10"
32
33
  type: :development
33
34
  version_requirements: *id001
35
+ - !ruby/object:Gem::Dependency
36
+ name: hoe
37
+ prerelease: false
38
+ requirement: &id002 !ruby/object:Gem::Requirement
39
+ none: false
40
+ requirements:
41
+ - - ~>
42
+ - !ruby/object:Gem::Version
43
+ hash: 27
44
+ segments:
45
+ - 2
46
+ - 12
47
+ version: "2.12"
48
+ type: :development
49
+ version_requirements: *id002
34
50
  description: Application framework for state based session management
35
51
  email:
36
52
  - mhatakeyama@ywesee.com, zdavatz@ywesee.com
@@ -94,7 +110,6 @@ files:
94
110
  - test/test_validator.rb
95
111
  - usage-en.txt
96
112
  - .gemtest
97
- has_rdoc: true
98
113
  homepage: http://scm.ywesee.com/?p=sbsm/.git;a=summary
99
114
  licenses: []
100
115
 
@@ -105,23 +120,27 @@ rdoc_options:
105
120
  require_paths:
106
121
  - lib
107
122
  required_ruby_version: !ruby/object:Gem::Requirement
123
+ none: false
108
124
  requirements:
109
125
  - - ">="
110
126
  - !ruby/object:Gem::Version
127
+ hash: 3
111
128
  segments:
112
129
  - 0
113
130
  version: "0"
114
131
  required_rubygems_version: !ruby/object:Gem::Requirement
132
+ none: false
115
133
  requirements:
116
134
  - - ">="
117
135
  - !ruby/object:Gem::Version
136
+ hash: 3
118
137
  segments:
119
138
  - 0
120
139
  version: "0"
121
140
  requirements: []
122
141
 
123
142
  rubyforge_project: sbsm
124
- rubygems_version: 1.3.6
143
+ rubygems_version: 1.8.15
125
144
  signing_key:
126
145
  specification_version: 3
127
146
  summary: Application framework for state based session management