[whimsy] branch master updated: Ruby complains of unsafe spawn operation

[se...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

sebb pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git


The following commit(s) were added to refs/heads/master by this push:
     new a4e738b  Ruby complains of unsafe spawn operation
a4e738b is described below

commit a4e738b5055d67e00c21a442b6b5faeb91a59b13
Author: Sebb <se...@apache.org>
AuthorDate: Sun Jan 12 22:49:24 2020 +0000

    Ruby complains of unsafe spawn operation
---
 www/secretary/workbench/views/actions/icla2.json.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/www/secretary/workbench/views/actions/icla2.json.rb b/www/secretary/workbench/views/actions/icla2.json.rb
index 6dcc0de..30b3280 100644
--- a/www/secretary/workbench/views/actions/icla2.json.rb
+++ b/www/secretary/workbench/views/actions/icla2.json.rb
@@ -69,7 +69,7 @@ end
 #   - calling .max on an empty array returns nil.  Treat it as one as there
 #     is an existing document that will be moved into this directory.
 #   - If all else fails, set count to "N"
-count = (Array(ASF::SVN.list(ASF::SVN.svnurl('iclas') + '/' + @filename)).
+count = (Array(ASF::SVN.list(ASF::SVN.svnurl('iclas') + '/' + @filename.untaint)).
       first.to_s.split.
       map {|name| name[/.*(\d+)\./, 1] || 1}.
       map(&:to_i).max || 1) + 1 rescue 'N'