Bug #8161: String#+ should inherit untrustedness

• Status: Closed
• Assignee: -
• Target version: 2.1.0
• ruby -v: r39923

[marcandre (Marc-Andre Lafortune)]

As noted by Nikolai Weibull [ruby-core:53679], String#+ doesn't maintain untrustedness.

s = "foo".untrust
(s * 2).untrusted? # => true
(s + s).untrusted? # => false, should be true
(s + '').untrusted? # => false, should also be true

• Status changed from Open to Closed

Untrustedness is now deprecated and behaves the same as tainting.

Taintedness is properly propagated in your examples, so I'm closing this.