wunderbar 0.14.3 → 0.14.4

data/lib/wunderbar/environment.rb

@@ -12,6 +12,22 @@ module Wunderbar
   end
 
   def self.safe?
+    if $SAFE == 0 and not @@unsafe
+      # some gems (e.g. em-websocket-0.3.6) insert unsafe entries into the
+      # path, and that prevents requires from succeeding.  If it looks like
+      # we are about to make a transition to $SAFE=1, clean up that mess
+      # before proceeding.
+      #
+      # the goal of $SAFE is not to protect us against software which was
+      # installed by the owner of the site, but from injection attacks
+      # contained within data provided by users of the site.
+      $:.each_with_index do |path, index|
+        if path.tainted?
+          $:[index] = File.expand_path(path.untaint).untaint
+        end
+      end
+    end
+
     not @@unsafe
   end
 

data/lib/wunderbar/version.rb

@@ -2,7 +2,7 @@ module Wunderbar
   module VERSION #:nodoc:
     MAJOR = 0
     MINOR = 14
-    TINY  = 3
+    TINY  = 4
 
     STRING = [MAJOR, MINOR, TINY].join('.')
   end

data/wunderbar.gemspec

@@ -2,11 +2,11 @@
 
 Gem::Specification.new do |s|
   s.name = "wunderbar"
-  s.version = "0.14.3"
+  s.version = "0.14.4"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Sam Ruby"]
-  s.date = "2012-05-01"
+  s.date = "2012-05-02"
   s.description = "    Wunderbar makes it easy to produce valid HTML5, wellformed XHTML, Unicode\n    (utf-8), consistently indented, readable applications.  This includes\n    output that conforms to the Polyglot specification and the emerging\n    results from the XML Error Recovery Community Group.\n"
   s.email = "rubys@intertwingly.net"
   s.files = ["wunderbar.gemspec", "README.md", "COPYING", "lib/wunderbar.rb", "lib/wunderbar", "lib/wunderbar/installation.rb", "lib/wunderbar/html-methods.rb", "lib/wunderbar/job-control.rb", "lib/wunderbar/server.rb", "lib/wunderbar/logger.rb", "lib/wunderbar/rack.rb", "lib/wunderbar/builder.rb", "lib/wunderbar/websocket.rb", "lib/wunderbar/sinatra.rb", "lib/wunderbar/environment.rb", "lib/wunderbar/rails.rb", "lib/wunderbar/cgi-methods.rb", "lib/wunderbar/cssproxy.rb", "lib/wunderbar/version.rb"]

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: wunderbar
 version: !ruby/object:Gem::Version 
-  hash: 33
+  hash: 47
   prerelease: 
   segments: 
   - 0
   - 14
-  - 3
-  version: 0.14.3
+  - 4
+  version: 0.14.4
 platform: ruby
 authors: 
 - Sam Ruby
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-05-01 00:00:00 Z
+date: 2012-05-02 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: builder