[ruby-dev:48321] [ruby-trunk - Bug #9976] [Open] ENV doesn't raise SecurityError except for aset and delete

[ruby-dev:48321] [ruby-trunk - Bug #9976] [Open] ENV doesn't raise SecurityError except for aset and delete

[nobu]

Issue #9976 has been reported by Nobuyoshi Nakada.

----------------------------------------
Bug #9976: ENV doesn't raise SecurityError except for aset and delete
https://bugs.ruby-lang.org/issues/9976

* Author: Nobuyoshi Nakada
* Status: Open
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 
* ruby -v: trunk
* Backport: 2.0.0: REQUIRED, 2.1: REQUIRED
----------------------------------------
`ENV#[]=` と `ENV#delete` は`$SAFE > 0`のときにtaintedな引数をエラーにしますが、他のメソッドでエラーになりません。



-- 
https://bugs.ruby-lang.org/

[ruby-dev:48322] [ruby-trunk - Bug #9976] [Closed] ENV doesn't raise SecurityError except for aset and delete

[nobu]

Issue #9976 has been updated by Nobuyoshi Nakada.

Status changed from Open to Closed
% Done changed from 0 to 100

Applied in changeset r46547.

----------
hash.c: prohibit tainted strings

* hash.c (env_aset, env_has_key, env_assoc, env_has_value),
  (env_rassoc, env_key): prohibit tainted strings if $SAFE is
  non-zero.  [Bug #9976]

----------------------------------------
Bug #9976: ENV doesn't raise SecurityError except for aset and delete
https://bugs.ruby-lang.org/issues/9976#change-47372

* Author: Nobuyoshi Nakada
* Status: Closed
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 
* ruby -v: trunk
* Backport: 2.0.0: REQUIRED, 2.1: REQUIRED
----------------------------------------
`ENV#[]=` と `ENV#delete` は`$SAFE > 0`のときにtaintedな引数をエラーにしますが、他のメソッドでエラーになりません。



-- 
https://bugs.ruby-lang.org/

[ruby-dev:48511] [ruby-trunk - Bug #9976] ENV doesn't raise SecurityError except for aset and delete

[nagachika00]

Issue #9976 has been updated by Tomoyuki Chikanaga.

Backport changed from 2.0.0: REQUIRED, 2.1: REQUIRED to 2.0.0: REQUIRED, 2.1: DONE

Backported into `ruby_2_1` branch at r47346.

----------------------------------------
Bug #9976: ENV doesn't raise SecurityError except for aset and delete
https://bugs.ruby-lang.org/issues/9976#change-48603

* Author: Nobuyoshi Nakada
* Status: Closed
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 
* ruby -v: trunk
* Backport: 2.0.0: REQUIRED, 2.1: DONE
----------------------------------------
`ENV#[]=` と `ENV#delete` は`$SAFE > 0`のときにtaintedな引数をエラーにしますが、他のメソッドでエラーになりません。



-- 
https://bugs.ruby-lang.org/

[ruby-dev:48528] [ruby-trunk - Bug #9976] ENV doesn't raise SecurityError except for aset and delete

[usa]

Issue #9976 has been updated by Usaku NAKAMURA.

Backport changed from 2.0.0: REQUIRED, 2.1: DONE to 2.0.0: DONE, 2.1: DONE

backported into `ruby_2_0_0` at r47492.

----------------------------------------
Bug #9976: ENV doesn't raise SecurityError except for aset and delete
https://bugs.ruby-lang.org/issues/9976#change-48768

* Author: Nobuyoshi Nakada
* Status: Closed
* Priority: Normal
* Assignee: 
* Category: 
* Target version: 
* ruby -v: trunk
* Backport: 2.0.0: DONE, 2.1: DONE
----------------------------------------
`ENV#[]=` と `ENV#delete` は`$SAFE > 0`のときにtaintedな引数をエラーにしますが、他のメソッドでエラーになりません。



-- 
https://bugs.ruby-lang.org/