From 835234a52c487002a516792dbdea3a44d110ba3d Mon Sep 17 00:00:00 2001 From: Stormwind Date: Sat, 22 Dec 2012 19:08:02 +0100 Subject: Improve query valid regex Now a query string cannot look like 'foo=bar=foo' anymore. --- lib/zero/patches/uri.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'lib') diff --git a/lib/zero/patches/uri.rb b/lib/zero/patches/uri.rb index a761fbc..0b64abb 100644 --- a/lib/zero/patches/uri.rb +++ b/lib/zero/patches/uri.rb @@ -18,7 +18,6 @@ module URI return self.decode_www_form_18 query end - # Own implementation of decode_www_form. # Shall behave almost like the original method, but without any encoding # stuff. @@ -28,7 +27,8 @@ module URI # def self.decode_www_form_18(query) return [] if query.empty? - unless query.match '=' + + unless query.match /^[^#=;&]*=[^#=;&]*([;&][^#=;&]*=[^#=;&]*)*$/ raise ArgumentError, "invalid data of application/x-www-form-urlencoded (#{query})" end -- cgit v1.2.3-70-g09d2