Revision 2e632711 - * lib/webrick/httpresponse.rb (WEBrick::HTTPResponse#set_error): Fix for po... - Ruby - Ruby Issue Tracking System

« Previous | Next »

Revision 2e632711

Added by yugui (Yuki Sonoda) almost 15 years ago

ID 2e632711482dfbfc8e18990be485fbed4784a095
Parent 10bc4d23
Child 9f89da18

lib/webrick/httpresponse.rb (WEBrick::HTTPResponse#set_error):
Fix for possible cross-site scripting (CVE-2010-0541).
Found by Apple, reported by Hideki Yamane.
Patch by Hirokazu Nishio <nishio.hirokazu AT gmail.com>.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_1@28997 b2dd03c8-39d4-4d8f-98ff-823fe69b080e