diff options
author | drbrain <drbrain@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2013-11-22 18:53:21 +0000 |
---|---|---|
committer | drbrain <drbrain@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2013-11-22 18:53:21 +0000 |
commit | e8e18cff7a7f61e4cf3ee390e1d6da31ecb9a9e4 (patch) | |
tree | 11423007aa0b1cde32fe3c95086772967810b20e /lib/rubygems.rb | |
parent | 0a5fc9c35fb0325ac7ee9b9eae65408b17f7add9 (diff) | |
download | ruby-e8e18cff7a7f61e4cf3ee390e1d6da31ecb9a9e4.tar.gz |
* lib/rubygems: Update to RubyGems master dcce4ff. Important changes
in this commit:
Remove automatic detection of gem dependencies files. This prevents a
security hole as described in [ruby-core:58490]
Fixed bugs for installing git gems.
* test/rubygems: ditto.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@43806 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'lib/rubygems.rb')
-rw-r--r-- | lib/rubygems.rb | 14 |
1 files changed, 9 insertions, 5 deletions
diff --git a/lib/rubygems.rb b/lib/rubygems.rb index a6c97ed16d..8a0d992141 100644 --- a/lib/rubygems.rb +++ b/lib/rubygems.rb @@ -8,7 +8,7 @@ require 'rbconfig' module Gem - VERSION = '2.2.0.preview.2' + VERSION = '2.2.0' end # Must be first since it unloads the prelude from 1.9.2 @@ -995,12 +995,16 @@ module Gem # Looks for gem dependency files (gem.deps.rb, Gemfile, Isolate) from the # current directory up and activates the gems in the first file found. # - # This is run automatically when rubygems starts. To disable, set - # the <code>RUBYGEMS_GEMDEPS=</code> environment variable to an empty - # string. + # You can run this automatically when rubygems starts. To enable, set + # the <code>RUBYGEMS_GEMDEPS</code> environment variable to either the path + # of your Gemfile or "-" to auto-discover in parent directories. + # + # NOTE: Enabling automatic discovery on multiuser systems can lead to + # execution of arbitrary code when used from directories outside your + # control. def self.use_gemdeps - return unless path = ENV['RUBYGEMS_GEMDEPS'] || '-' + return unless path = ENV['RUBYGEMS_GEMDEPS'] path = path.dup.untaint if path == "-" |