ruby.git/lib, branch v1_8_5_135

merge revision(s) 13687:

2008-06-07T16:24:22+00:00

	* lib/rexml/source.rb (REXML::SourceFactory::SourceFactory): typo
	  fixed.  [ruby-list:44099]


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@16885 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

merge revision(s) 13657:

2008-06-07T16:15:19+00:00

	* lib/net/http.rb, lib/open-uri.rb: remove
	  Net::HTTP#enable_post_connection_check.  [ruby-dev:31960]
	* lib/net/imap.rb: hostname should be verified against server's
	  indentity as persented in the server's certificate. [ruby-dev:31960]
	* ext/openssl/lib/net/telnets.rb, ext/openssl/lib/net/ftptls.rb: ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@16876 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/webrick/httpservlet/filehandler.rb: should normalize path

2008-05-20T16:35:25+00:00

  name in path_info to prevent script disclosure vulnerability on
  DOSISH filesystems. (fix: CVE-2008-1891)
  Note: NTFS/FAT filesystem should not be published by the platforms
  other than Windows. Pathname interpretation (including short
  filename) is less than perfect.

* lib/webrick/httpservlet/abstract.rb
  (WEBrick::HTTPServlet::AbstracServlet#redirect_to_directory_uri):
  should escape the value of Location: header.

* lib/webrick/httpservlet/cgi_runner.rb: accept interpreter
  command line arguments.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@16495 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

merge revision(s) 15677:

2008-03-03T14:37:52+00:00

	* lib/webrick/httpservlet/filehandler.rb: should normalize path
	  separators in path_info to prevent directory traversal attacks
	  on DOSISH platforms.
	  reported by Digital Security Research Group [DSECRG-08-026].
	* lib/webrick/httpservlet/filehandler.rb: pathnames which have
	  not to be published should be checked case-insensitively.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@15680 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/net/http.rb: fix typo.

2007-09-24T08:02:31+00:00

	* lib/net/http.rb: an SSL verification (the server hostname should
	  be matched with its certificate's commonName) is added.
	  this verification can be skipped by
	  "Net::HTTP#enable_post_connection_check=(false)".
	  suggested by Chris Clark 
	* lib/net/open-uri.rb: use Net::HTTP#enable_post_connection_check to
	  perform SSL post connection check.
	* ext/openssl/lib/openssl/ssl.c
	(OpenSSL::SSL::SSLSocket#post_connection_check): refine error message.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13502 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/rdoc/options.rb (Options::check_diagram): dot -V output

2007-09-22T20:58:40+00:00

	  changed. [ ruby-Bugs-11978 ], Thanks Florian Frank.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13486 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/rinda/tuplespace.rb: fix Rinda::TupleSpace keeper thread bug.

2007-08-15T23:44:19+00:00

	  the thread is started too early. [ruby-talk:264062] 
	* test/rinda/test_rinda.rb: ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13055 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

* lib/rexml/encodings/{ISO-8859-15,CP-1252}.rb: fixed invalid syntax.

2007-08-15T23:28:47+00:00

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13049 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13047 b2dd03c8-39d4-4d8f-98ff-823fe69b080e

2007-08-15T23:27:47+00:00

* lib/mkmf.rb (create_makefile): make OBJS depend on RUBY_EXTCONF_H

2007-08-15T22:33:40+00:00

	  only if extconf.h is created.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@13032 b2dd03c8-39d4-4d8f-98ff-823fe69b080e