[ruby-core:84100] [Ruby trunk Bug#14075][Closed] File.dirname("path without dir".taint) returns untainted string

From: nobu@...
Date: 2017-12-05 07:44:08 UTC
List: ruby-core #84100
Issue #14075 has been updated by nobu (Nobuyoshi Nakada).

Status changed from Open to Closed

I think it is intended.
`dirname` for a path without directory is ".", and this does not come from the argument string.

----------------------------------------
Bug #14075: File.dirname("path without dir".taint) returns untainted string
https://bugs.ruby-lang.org/issues/14075#change-68198

* Author: znz (Kazuhiro NISHIYAMA)
* Status: Closed
* Priority: Normal
* Assignee: 
* Target version: 
* ruby -v: 
* Backport: 2.3: UNKNOWN, 2.4: UNKNOWN
----------------------------------------
Is this intentional?

```
% ruby -e 'p [File.dirname("foo/bar".taint).tainted?, File.dirname("hoge".taint).tainted?]'
[true, false]
```



-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>

In This Thread

Prev Next