Project

General

Profile

« Previous | Next » 

Revision 6253fbea

Added by drbrain (Eric Hodel) over 13 years ago

Backport security fixes for RubyGems 1.3.7:

  • lib/rubygems: Apply the following security fixes to RubyGems 1.3.7:

    RubyGems now disallows redirection from HTTPS to HTTP.

    RubyGems now verifies SSL connections.

    Patch by Hiroshi Nakamura.

  • test/rubygems: ditto.

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@35407 b2dd03c8-39d4-4d8f-98ff-823fe69b080e