ruby.git/doc/command_injection.rdoc, branch v3_4_9 The Ruby Programming Language [DOC] Update command_injection.rdoc 2024-01-22T03:06:00+00:00 Nobuyoshi Nakada nobu@ruby-lang.org 2024-01-22T03:06:00+00:00 4a11f50f79e7fd592a300f46302e11f56e04a983 - Add missing `Kernel.exec` and `Kernel.spawn`. - Elaborate arguments that can cause injections. 
- Add missing `Kernel.exec` and `Kernel.spawn`.
- Elaborate arguments that can cause injections.
[DOC] Adjust heading levels 2023-11-14T06:56:58+00:00 Nobuyoshi Nakada nobu@ruby-lang.org 2023-11-14T06:39:10+00:00 19a7a7660c34c862689f99b4f9b0447be92cbffb So that the first headings would be the top-most headings. 
So that the first headings would be the top-most headings.
Deprecate Kernel#open and IO support for subprocess creation/forking 2023-08-10T00:38:11+00:00 Mike Dalessio mike.dalessio@gmail.com 2023-06-07T14:05:04+00:00 d2343368ab7e270118ea6baa9c6418bfed83135c Deprecate Kernel#open and IO support for subprocess creation and forking. This deprecates subprocess creation and forking in - Kernel#open - URI.open - IO.binread - IO.foreach - IO.readlines - IO.read - IO.write This behavior is slated to be removed in Ruby 4.0 [Feature #19630] 
Deprecate Kernel#open and IO support for subprocess creation and
forking. This deprecates subprocess creation and forking in

- Kernel#open
- URI.open
- IO.binread
- IO.foreach
- IO.readlines
- IO.read
- IO.write

This behavior is slated to be removed in Ruby 4.0

[Feature #19630]
[DOC] Escape backqoute method not to be converted to smart quotes 2022-09-03T14:47:46+00:00 Nobuyoshi Nakada nobu@ruby-lang.org 2022-09-03T14:47:46+00:00 0111dc5b79a8cfe81f467cfcf589dd4042e0384c 






Enhanced RDoc concerning command injection (#5537)
2022-02-18T12:46:04+00:00

Burdette Lamar
BurdetteLamar@Yahoo.com

2022-02-18T12:46:04+00:00

e9a2b30744a62268c66d6c17730ed96486d9783c

Clarifies security vulnerabilities for commands.

Treats:

    Kernel.system
    Kernel.` (backtick)
    IO.popen
    IO.read
    IO.write
    IO.binread
    IO.binwrite
    IO.readlines
    IO.foreach





Clarifies security vulnerabilities for commands.

Treats:

    Kernel.system
    Kernel.` (backtick)
    IO.popen
    IO.read
    IO.write
    IO.binread
    IO.binwrite
    IO.readlines
    IO.foreach