pkgsrc-ng/www/ruby-rack-ssl/patches/patch-lib_rack_ssl.rb
2014-08-11 13:27:10 +02:00

16 lines
489 B
Ruby

$NetBSD: patch-lib_rack_ssl.rb,v 1.1 2014/03/21 01:06:47 taca Exp $
Security fix for CVE-2014-2538.
--- lib/rack/ssl.rb.orig 2014-03-19 13:38:14.000000000 +0000
+++ lib/rack/ssl.rb
@@ -55,6 +55,8 @@ module Rack
'Location' => url.to_s)
[status, headers, []]
+ rescue URI::InvalidURIError
+ [400, {"Content-Type" => "text/plain"}, []]
end
# http://tools.ietf.org/html/draft-hodges-strict-transport-sec-02