Sha256: c1d8d2e7536da71849cf93b0ffd0833d9c1072a0b1ad50ba55d9650f0479f209

Contents?: true

Size: 1.66 KB

Versions: 285

Compression:

Stored size: 1.66 KB

Contents

# :stopdoc:

# Stolen from ruby core's uri/common.rb @32618ba to fix DoS issues in 1.9.2
#
# https://github.com/ruby/ruby/blob/32618ba7438a2247042bba9b5d85b5d49070f5e5/lib/uri/common.rb
#
# Issue:
# http://redmine.ruby-lang.org/issues/5149
#
# Relevant Fixes:
# https://github.com/ruby/ruby/commit/b5f91deee04aa6ccbe07c23c8222b937c22a799b
# https://github.com/ruby/ruby/commit/93177c1e5c3906abf14472ae0b905d8b5c72ce1b
#
# This should probably be removed once there is a Ruby 1.9.2 patch level that
# includes this fix.

require 'uri/common'

module URI
  TBLDECWWWCOMP_ = {} unless const_defined?(:TBLDECWWWCOMP_)  #:nodoc:
  if TBLDECWWWCOMP_.empty?
    256.times do |i|
      h, l = i>>4, i&15
      TBLDECWWWCOMP_['%%%X%X' % [h, l]] = i.chr
      TBLDECWWWCOMP_['%%%x%X' % [h, l]] = i.chr
      TBLDECWWWCOMP_['%%%X%x' % [h, l]] = i.chr
      TBLDECWWWCOMP_['%%%x%x' % [h, l]] = i.chr
    end
    TBLDECWWWCOMP_['+'] = ' '
    TBLDECWWWCOMP_.freeze
  end

  def self.decode_www_form(str, enc=Encoding::UTF_8)
    return [] if str.empty?
    unless /\A#{WFKV_}=#{WFKV_}(?:[;&]#{WFKV_}=#{WFKV_})*\z/o =~ str
      raise ArgumentError, "invalid data of application/x-www-form-urlencoded (#{str})"
    end
    ary = []
    $&.scan(/([^=;&]+)=([^;&]*)/) do
      ary << [decode_www_form_component($1, enc), decode_www_form_component($2, enc)]
    end
    ary
  end

  def self.decode_www_form_component(str, enc=Encoding::UTF_8)
    raise ArgumentError, "invalid %-encoding (#{str})" unless /\A[^%]*(?:%\h\h[^%]*)*\z/ =~ str
    str.gsub(/\+|%\h\h/, TBLDECWWWCOMP_).force_encoding(enc)
  end

  remove_const :WFKV_ if const_defined?(:WFKV_)
  WFKV_ = '(?:[^%#=;&]*(?:%\h\h[^%#=;&]*)*)' # :nodoc:
end

Version data entries

285 entries across 204 versions & 43 rubygems

Version Path
logstash-output-icinga-1.0.0 vendor/jruby/1.9/gems/rack-1.6.6/lib/rack/backports/uri/common_192.rb
rack-1.6.6 lib/rack/backports/uri/common_192.rb
enju_leaf-1.2.1 vendor/bundle/ruby/2.3/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
tdiary-5.0.4 vendor/bundle/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
mdg-1.0.1 vendor/bundle/ruby/2.3.0/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
logstash-input-fifo-0.9.1 vendor/bundle/jruby/1.9/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
logstash-input-fifo-0.9.1 vendor/bundle/jruby/1.9/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
logstash-input-fifo-0.9.0 vendor/bundle/jruby/1.9/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
logstash-input-fifo-0.9.0 vendor/bundle/jruby/1.9/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
logstash-input-salesforce-3.0.0 vendor/jruby/1.9/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
logstash-input-salesforce-3.0.0 vendor/jruby/1.9/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
arcabouco-0.2.13 vendor/bundle/gems/rack-1.6.4/lib/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.4 vendor/local/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.4 vendor/local/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.3 vendor/local/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.3 vendor/local/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.2 vendor/local/gems/rack-1.6.5/lib/rack/backports/uri/common_192.rb
ivanvc-logstash-input-s3-3.1.1.2 vendor/local/gems/puma-2.16.0-java/lib/puma/rack/backports/uri/common_192.rb
rack-1.6.5 lib/rack/backports/uri/common_192.rb
tdiary-5.0.2 vendor/bundle/gems/rack-1.6.4/lib/rack/backports/uri/common_192.rb