ruby-dev

In article <[email protected]>,
  [email protected] writes:

> matz	2007-01-31 14:47:33 +0900 (Wed, 31 Jan 2007)
>
>   New Revision: 11604
>
>   Modified files:
>     trunk/ChangeLog
>     trunk/lib/open-uri.rb
>
>   Log:
>     * lib/open-uri.rb (OpenURI::OpenURI.open_uri): use user and
>       password from URI unless http_basic_authentication is specified
>       explicitly.  [ruby-core:10114]

userinfo に password を書くことには RFC 3986 でセキュリティ
上の危険性が指摘されていることから、open-uri では userinfo
はサポートしないことにしています。
(open-uri.rb の中にもコメントに書いてあります。)

また、そのことは以前 [ruby-core:04397], [ruby-talk:170186],
[ruby-dev:28564] でも述べました。

従って、このような変更はしないでください。
-- 
[田中 哲][たなか あきら][Tanaka Akira]

Thread

Prev Next

In This Thread

Prev Next

[#30065] IO#lineno always returns 0 — Minero Aoki <aamine@...>

[#30070] ARGF.read() causes ArgumentError — Minero Aoki <aamine@...>

[#30071] ruby-changes — SASADA Koichi <ko1@...>

[#30072] send/__send__ and private method — SASADA Koichi <ko1@...>

[#30073] typo in TkTextWin — "Hiroyuki Iwatsuki" <don@...>

[#30074] TkConfigMethod#__confinfo_cmd should be private — okkez <okkez000@...>

[#30080] Ruby/Tk クラス名のゆれ — Kazuhiro Yoshida <moriq@...>

[#30088] trunkの2回目のmake install — Kazuhiro NISHIYAMA <zn@...>

[#30089] test/ruby/test_process.rb — Kazuhiro NISHIYAMA <zn@...>

[#30096] version.h maintenance — SASADA Koichi <ko1@...>

[#30097] revision number variable — SASADA Koichi <ko1@...>

[#30099] Re: [ ruby-Bugs-5822 ] Ruby's 'etc' module cannot handle the UID of OS X 'nobody' properly — Urabe Shyouhei <shyouhei@...>

[#30104] send optimization — SASADA Koichi <ko1@...>

[#30116] Array#dupがおかしい? — "madoka yamamoto" <yamamotomadoka@...>

[#30118] throw,catch後にraiseでプログラム終了 — "madoka yamamoto" <yamamotomadoka@...>

[#30121] file name and line number of parser error/warning — nobu@...

[#30126] net/pop error in Ruby 1.9 — Masaki Suketa <masaki.suketa@...>

[#30128] env.h in trunk — "U.Nakamura" <usa@...>

[#30130] ruby_1_8_5 へのコミット — Masaki Suketa <masaki.suketa@...>

[#30131] RubyLex fails to read "#{Time.now.strftime("%m/%d")}" — Masao Mutoh <mutoh@...>

[#30139] BASERUBY — "U.Nakamura" <usa@...>

[#30142] Time.parse("yyyy/mm") — Kazuhiro NISHIYAMA <zn@...>

[#30144] NKFでのUTF8→JIS変換の不具合 — Kazuhiko <kazuhiko@...>

[#30159] := operator — SASADA Koichi <ko1@...>

[#30163] pre-processor での YARV 判定 — Hidetoshi NAGAI <nagai@...>

[#30176] typo? in CGI#read_multipart — Tadashi Saito <[email protected]>

[#30177] Asoby: Aspect-Oriented Programming in Ruby — "Yoshinori Sano" <yoshinori.sano@...>

[#30178] Re: [ruby-cvs:18815] Ruby:r11571: * misc/ruby-mode.el (ruby-font-lock-syntactic-keywords): fix — Urabe Shyouhei <shyouhei@...>

[#30181] Open3.popen3 の終了処理 — とみたまさひろ <tommy@...>

[#30182] cgi.rb のファイル名取得処理 — とみたまさひろ <tommy@...>

[#30192] "".lines.dup.to_a causes NameError — Minero Aoki <aamine@...>

[#30198] coredump on NetBSD — "U.Nakamura" <usa@...>

[#30199] YARV の thread について — Hidetoshi NAGAI <nagai@...>

[#30200] coredump on Mac OS X — "T.Kanai" <tin.k.gm@...>

[#30206] local var name collision in instruby.rb (matzruby) — "U.Nakamura" <usa@...>

[#30211] String#sub!{...} — Kazuhiro NISHIYAMA <zn@...>

[#30214] move ruby_1_8_5 to SVN — Shugo Maeda <shugo@...>

[#30220] schedule for Ruby 1.8.6 — "Akinori MUSHA" <knu@...>

[#30230] Re: [ruby-cvs:18852] Ruby:r11604: * lib/open-uri.rb (OpenURI::OpenURI.open_uri): use user and — Tanaka Akira <akr@...>

[ruby-dev:30230] Re: [ruby-cvs:18852] Ruby:r11604: * lib/open-uri.rb (OpenURI::OpenURI.open_uri): use user and

Thread

In This Thread

[#30072] send/send and private method — SASADA Koichi <ko1@...>