diff options
| author | Mercedes Bernard <mercedesrbernard@gmail.com> | 2023-02-15 13:27:39 -0600 |
|---|---|---|
| committer | git <svn-admin@ruby-lang.org> | 2023-02-23 08:50:02 +0000 |
| commit | d5994eb4362d7aba01c36b1b3a1ec3e7462d70d5 (patch) | |
| tree | 3cdcf9e5a0857c04cb4efd8f481696455807ac08 /lib/bundler.rb | |
| parent | 3d5ec8401f9b7736402a091deb10dc124c4540f4 (diff) | |
[rubygems/rubygems] safe marshal gem specs when inflating
https://github.com/rubygems/rubygems/commit/5c5d0c5350
Diffstat (limited to 'lib/bundler.rb')
| -rw-r--r-- | lib/bundler.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/bundler.rb b/lib/bundler.rb index 95524b7e61..68fcff7840 100644 --- a/lib/bundler.rb +++ b/lib/bundler.rb @@ -39,7 +39,7 @@ module Bundler environment_preserver.replace_with_backup SUDO_MUTEX = Thread::Mutex.new - SAFE_MARSHAL_CLASSES = [Symbol, TrueClass, String, Array, Hash, Gem::Version].freeze + SAFE_MARSHAL_CLASSES = [Symbol, TrueClass, String, Array, Hash, Gem::Version, Gem::Specification].freeze SAFE_MARSHAL_ERROR = "Unexpected class %s present in marshaled data. Only %s are allowed." SAFE_MARSHAL_PROC = proc do |object| object.tap do |