cgi

cgi copied to clipboard

I looked at the following 2 specifications and got the following information: [2.2](https://www.rfc-editor.org/rfc/rfc2616#section-2.2) Basic Rules  [4.1.1](https://www.rfc-editor.org/rfc/rfc6265#section-4.1.1). Syntax  The token and path cannot contain CTL. The regular expressions of...

xiaoge1001

test_cgi_cookie_new_with_domain does not run in 2.6 or earlier

4

The test added in 107a0c67f922044dc78e2fde94f991206267a6a0 contains a test that uses `**h* to merge two string hashes. This does not work under Ruby 2.6 and earlier, making it impossible to test...

headius

Fix test that only runs in 2.7 or higher

1

There's no branch to apply this to, but it was based on the v0.1.0.2 tag (which also does not live on any branch). Once there are branches for maintenance releases,...

headius

CGI security fixes for old versions are not in repository

8

We were informed today of the new CVE-2021-33621 and want to update the copy of cgi shipped with JRuby 9.3. Unfortunately Ruby 2.6 has not been patched and I cannot...

headius

Drop C89 support (= Ruby 2.x support)?

3

ext/cgi/escape.c uses C99 features, which cannot use before ruby 3.0. * Designated Initializers for `html_escape_table` * Variable declaration after code in `optimized_escape_html` The latter is easy to make C89-compliant but...

nobu

The class of `CGI.escapeHTML` result is not consistent for escaped/non-escaped cases. ```ruby require 'cgi/escape' class S {"a"=>S, "&"=>String} ``` Probably, should be `String` always?

nobu

Unable to read query params in a POST method

2

The current logic around handling query params is flawed. Parameters are only drawn from the query string on GET or HEAD requests. https://github.com/ruby/cgi/blob/master/lib/cgi/core.rb#L661-L699

LevitatingBusinessMan

When a POST request is made without form data it may not have a Content-Length, in which case an error is formed on [this](https://github.com/ruby/cgi/blob/master/lib/cgi/core.rb#L681) line.

LevitatingBusinessMan

In some cases you may want to escape a string in a different way than the default behavior. For instance, if you are trying to make some JSON save to...

byroot

Bumps [rubygems/release-gem](https://github.com/rubygems/release-gem) from 1.1.1 to 1.1.2. Release notes Sourced from rubygems/release-gem's releases. v1.1.2 What's Changed Update example to opt out of persisting credentials by @​landongrindheim in rubygems/release-gem#19 Prevent credentials from...

dependabot[bot]