Added by marcandre (Marc-Andre Lafortune) over 13 years ago. Updated almost 13 years ago.
Description
As noted by Nikolai Weibull [ruby-core:53679], String#+ doesn't maintain untrustedness.
s = "foo".untrust (s * 2).untrusted? # => true (s + s).untrusted? # => false, should be true (s + '').untrusted? # => false, should also be true
Untrustedness is now deprecated and behaves the same as tainting.
Taintedness is properly propagated in your examples, so I'm closing this.
Also available in: PDF Atom
Updated by Anonymous