cgi

cgi copied to clipboard

I looked at the following 2 specifications and got the following information: [2.2](https://www.rfc-editor.org/rfc/rfc2616#section-2.2) Basic Rules  [4.1.1](https://www.rfc-editor.org/rfc/rfc6265#section-4.1.1). Syntax  The token and path cannot contain CTL. The regular expressions of...

xiaoge1001

test_cgi_cookie_new_with_domain does not run in 2.6 or earlier

4

The test added in 107a0c67f922044dc78e2fde94f991206267a6a0 contains a test that uses `**h* to merge two string hashes. This does not work under Ruby 2.6 and earlier, making it impossible to test...

headius

Fix test that only runs in 2.7 or higher

1

There's no branch to apply this to, but it was based on the v0.1.0.2 tag (which also does not live on any branch). Once there are branches for maintenance releases,...

headius

CGI security fixes for old versions are not in repository

8

We were informed today of the new CVE-2021-33621 and want to update the copy of cgi shipped with JRuby 9.3. Unfortunately Ruby 2.6 has not been patched and I cannot...

headius

Drop C89 support (= Ruby 2.x support)?

3

ext/cgi/escape.c uses C99 features, which cannot use before ruby 3.0. * Designated Initializers for `html_escape_table` * Variable declaration after code in `optimized_escape_html` The latter is easy to make C89-compliant but...

nobu

The class of `CGI.escapeHTML` result is not consistent for escaped/non-escaped cases. ```ruby require 'cgi/escape' class S {"a"=>S, "&"=>String} ``` Probably, should be `String` always?

nobu