ruby.git/lib/tmpdir.rb, branch v3_0_4

Make usable chars more strict

2021-04-05T11:06:22+00:00

Remove other than alphanumeric and some punctuations considered
filesystem-safe, instead of removing some unsafe chars only.

https://hackerone.com/reports/1131465

[ruby/tmpdir] Warn when environment variables skipped (fixes #2)

2020-09-14T09:22:37+00:00

https://github.com/ruby/tmpdir/commit/af7b020a89

Correctly remove temporary directory if path yielded is mutated

2020-05-29T14:06:46+00:00

Another approach would be to freeze the string, but that could
cause backwards compatibility issues.

Fixes [Bug #16918]

Isolate the PRNG for tmpdir/tempfile

2020-01-29T01:14:15+00:00

To get rid of conflicts affected by `srand`.

Warn on access/modify of $SAFE, and remove effects of modifying $SAFE

2019-11-17T23:00:25+00:00

This removes the security features added by $SAFE = 1, and warns for access
or modification of $SAFE from Ruby-level, as well as warning when calling
all public C functions related to $SAFE.

This modifies some internal functions that took a safe level argument
to no longer take the argument.

rb_require_safe now warns, rb_require_string has been added as a
version that takes a VALUE and does not warn.

One public C function that still takes a safe level argument and that
this doesn't warn for is rb_eval_cmd.  We may want to consider
adding an alternative method that does not take a safe level argument,
and warn for rb_eval_cmd.

Fix keyword argument separation issues in lib

2019-08-30T19:39:31+00:00

Mostly requires adding ** in either calls or method definitions.

Constified unusable chars

2019-06-21T14:04:34+00:00

tmpdir.rb: permission of user given directory

2019-01-23T06:06:47+00:00

* lib/tmpdir.rb (Dir.mktmpdir): check if the permission of the
  parent directory only when using the default temporary
  directory, and no check against user given directory.  the
  security is the user's responsibility in that case.
  [ruby-core:91216] [Bug #15555]

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@66909 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

Ignore file separator from tmpfile/tmpdir name.

2018-03-28T10:03:03+00:00

From: SHIBATA Hiroshi 

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@62990 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

tmpdir.rb: merged make_tmpname to create

2017-11-15T08:02:09+00:00

* lib/tmpdir.rb (Dir::Tmpname#create): try conversion of prefix
  and suffix just once before loop.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@60775 b2dd03c8-39d4-4d8f-98ff-823fe69b080e