ruby.git/lib/rubygems.rb, branch ruby_1_9_2

Backport security fixes for RubyGems 1.3.7:

2012-04-20T00:10:09+00:00

* lib/rubygems:  Apply the following security fixes to RubyGems 1.3.7:

  RubyGems now disallows redirection from HTTPS to HTTP.

  RubyGems now verifies SSL connections.

  Patch by Hiroshi Nakamura.
* test/rubygems:  ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@35407 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

merges r28693, r28695 and r28703 from trunk into ruby_1_9_2.

2010-07-29T15:14:57+00:00

--
* lib/rubygems/custom_require.rb, gem_prelude.rb: Load code from
  from gems properly.

* lib/rubygems.rb: Load the custom require if --disable-rubygems
  was used.

* gem_prelude.rb: Pull in rubygem's custom require
  [ruby-core:30846]

* lib/rubygems.rb: Handle always having custom require available

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@28786 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* gem_prelude.rb: provide workaround for gem activation. Currently,

2010-07-13T15:53:05+00:00

  gem activation does not work by default.  Now it can be worked
  around by requiring "rubygems" first.  [ruby-core:29486]
  a patch from Evan Phoenix in [ruby-core:31096].

* lib/rubygems.rb: ditto.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@28634 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

merge revision(s) 28245:

2010-06-10T05:04:20+00:00

------------------------------------------------------------------------
r28245 | naruse | 2010-06-10 13:31:08 +0900 (Thu, 10 Jun 2010) | 4 lines

Revert r28200.

It caused many failures on test-all and following is SEGV.
./ruby -e 'require %!#{"foo/" * 10000}foo!'
------------------------------------------------------------------------


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@28247 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* gem_prelude.rb: load full rubygems at LoadError for activation

2010-06-07T21:27:16+00:00

  check.  [ruby-core:29486]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@28200 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Merge fix for gem server, bump RubyGems version to 1.3.7

2010-05-01T05:19:16+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@27574 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Update to RubyGems 1.3.7.pre.1

2010-04-22T08:24:42+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@27441 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib: fixed typo. a patch by Sho Hashimoto in [ruby-dev:40716].

2010-03-20T03:30:59+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@26986 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* ruby.c (ruby_init_loadpath_safe): mark initial load paths.

2010-03-12T15:11:10+00:00

* gem_prelude.rb (push_all_highest_version_gems_on_load_path):
  search insertion position by initial load path mark.

* lib/rubygems.rb (Gem.load_path_insert_index): ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@26895 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/rubygems: update to 1.3.6.

2010-02-22T02:52:35+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@26728 b2dd03c8-39d4-4d8f-98ff-823fe69b080e