blob: 59529f2e9f29a90b870499ccec05c4682f601b5e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
$NetBSD: patch-dw,v 1.3 2010/09/10 03:29:00 taca Exp $
Additional fix after webrick security fix.
http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection/
--- lib/webrick/accesslog.rb.orig 2010-01-10 10:30:06.000000000 +0000
+++ lib/webrick/accesslog.rb
@@ -53,7 +53,7 @@ module WEBrick
when ?e, ?i, ?n, ?o
raise AccessLogError,
"parameter is required for \"#{spec}\"" unless param
- param = params[spec][param] ? escape(param) : "-"
+ (param = params[spec][param]) ? escape(param) : "-"
when ?t
params[spec].strftime(param || CLF_TIME_FORMAT)
when ?%
|
