Your message dated Sat, 29 Oct 2022 20:43:28 +0000
with message-id <e1oosfw-00glwg...@fasolo.debian.org>
and subject line Bug#1008324: fixed in ruby-rails-html-sanitizer 1.4.3-0.1
has caused the Debian Bug report #1008324,
regarding ruby-rails-html-sanitizer: FTBFS: ERROR: Test "ruby3.0" failed.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1008324: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008324
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: ruby-rails-html-sanitizer
Version: 1.4.2-2
Severity: serious
Justification: FTBFS
Tags: bookworm sid ftbfs
User: lu...@debian.org
Usertags: ftbfs-20220326 ftbfs-bookworm
Hi,
During a rebuild of all packages in sid, your package failed to build
on amd64.
Relevant part (hopefully):
> /usr/bin/ruby3.0 /usr/bin/gem2deb-test-runner
>
> ┌──────────────────────────────────────────────────────────────────────────────┐
> │ Checking Rubygems dependency resolution on ruby3.0
> │
> └──────────────────────────────────────────────────────────────────────────────┘
>
> GEM_PATH=/<<PKGBUILDDIR>>/debian/ruby-rails-html-sanitizer/usr/share/rubygems-integration/all:/<<PKGBUILDDIR>>/debian/.debhelper/generated/_source/home/.local/share/gem/ruby/3.0.0:/var/lib/gems/3.0.0:/usr/local/lib/ruby/gems/3.0.0:/usr/lib/ruby/gems/3.0.0:/usr/lib/x86_64-linux-gnu/ruby/gems/3.0.0:/usr/share/rubygems-integration/3.0.0:/usr/share/rubygems-integration/all:/usr/lib/x86_64-linux-gnu/rubygems-integration/3.0.0
> ruby3.0 -e gem\ \"rails-html-sanitizer\"
>
> ┌──────────────────────────────────────────────────────────────────────────────┐
> │ Run tests for ruby3.0 from debian/ruby-tests.rake
> │
> └──────────────────────────────────────────────────────────────────────────────┘
>
> RUBYLIB=.
> GEM_PATH=/<<PKGBUILDDIR>>/debian/ruby-rails-html-sanitizer/usr/share/rubygems-integration/all:/<<PKGBUILDDIR>>/debian/.debhelper/generated/_source/home/.local/share/gem/ruby/3.0.0:/var/lib/gems/3.0.0:/usr/local/lib/ruby/gems/3.0.0:/usr/lib/ruby/gems/3.0.0:/usr/lib/x86_64-linux-gnu/ruby/gems/3.0.0:/usr/share/rubygems-integration/3.0.0:/usr/share/rubygems-integration/all:/usr/lib/x86_64-linux-gnu/rubygems-integration/3.0.0
> ruby3.0 -S rake -f debian/ruby-tests.rake
> /usr/bin/ruby3.0 -w
> /usr/share/rubygems-integration/all/gems/rake-13.0.6/lib/rake/rake_test_loader.rb
> "test/sanitizer_test.rb" "test/scrubbers_test.rb" -v
> /usr/lib/x86_64-linux-gnu/rubygems-integration/3.0.0/gems/nokogiri-1.13.1/lib/nokogiri/version/info.rb:85:
> warning: possibly useless use of a variable in void context
> Run options: -v --seed 32300
>
> # Running:
>
> TextOnlyScrubberTest#test_removes_all_tags_and_keep_the_content = 0.00 s = .
> TextOnlyScrubberTest#test_skips_text_nodes = 0.00 s = .
> SanitizersTest#test_should_allow_merror_tag = 0.00 s = .
> SanitizersTest#test_should_allow_span_tag = 0.00 s = .
> SanitizersTest#test_should_allow_b_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_with_uppercase_tags =
> 0.00 s = .
> SanitizersTest#test_strip_tags_with_plaintext = 0.00 s = .
> SanitizersTest#test_should_allow_title_tag = 0.00 s = .
> SanitizersTest#test_should_allow_lineargradient_tag = 0.00 s = .
> SanitizersTest#test_should_allow_canvas_tag = 0.00 s = .
> SanitizersTest#test_should_allow_glyph_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert(String.fromCharCode(88,83,83))> = 0.00 s = .
> SanitizersTest#test_should_sanitize_script_tag_with_multiple_open_brackets =
> 0.00 s = F
>
>
> Failure:
> SanitizersTest#test_should_sanitize_script_tag_with_multiple_open_brackets
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:362]:
> Expected: <alert("XSS");//<
> Actual: alert("XSS");//
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:361
>
> SanitizersTest#test_strip_blank_string = 0.00 s = .
> SanitizersTest#test_should_allow_col_tag = 0.00 s = .
> SanitizersTest#test_should_allow_wbr_tag = 0.00 s = .
> SanitizersTest#test_x03a_handling_3 = 0.00 s = .
> SanitizersTest#test_should_sanitize_unterminated_cdata_section = 0.00 s = .
> SanitizersTest#test_should_allow_missing-glyph_tag = 0.00 s = .
> SanitizersTest#test_strip_tags_with_sentence = 0.00 s = .
> SanitizersTest#test_should_allow_figcaption_tag = 0.00 s = .
> SanitizersTest#test_should_allow_area_tag = 0.00 s = .
> SanitizersTest#test_x03a_handling_4 = 0.00 s = .
> SanitizersTest#test_should_allow_mover_tag = 0.00 s = .
> SanitizersTest#test_exclude_node_type_processing_instructions = 0.00 s = .
> SanitizersTest#test_strip_nested_tags = 0.00 s = F
>
>
> Failure:
> SanitizersTest#test_strip_nested_tags
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:67]:
> --- expected
> +++ actual
> @@ -1 +1 @@
> -"Wei<a onclick='alert(document.cookie);'/>rdos"
> +"Weia onclick='alert(document.cookie);'/>rdos"
>
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:64
>
> SanitizersTest#test_should_allow_mpadded_tag = 0.00 s = .
> SanitizersTest#test_should_allow_pre_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_invalid_script_tag = 0.00 s = .
> SanitizersTest#test_should_allow_kbd_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_invalid_tag_names = 0.00 s = .
> SanitizersTest#test_strip_cdata = 0.00 s = .
> SanitizersTest#test_should_allow_animatecolor_tag = 0.00 s = .
> SanitizersTest#test_should_allow_stop_tag = 0.00 s = .
> SanitizersTest#test_should_allow_dir_tag = 0.00 s = .
> SanitizersTest#test_should_allow_th_tag = 0.00 s = .
> SanitizersTest#test_should_allow_br_tag = 0.00 s = .
> SanitizersTest#test_should_allow_g_tag = 0.00 s = .
> SanitizersTest#test_should_allow_h1_tag = 0.00 s = .
> SanitizersTest#test_sanitize_image_src = 0.00 s = .
> SanitizersTest#test_should_allow_figure_tag = 0.00 s = .
> SanitizersTest#test_should_allow_dl_tag = 0.00 s = .
> SanitizersTest#test_should_allow_linearGradient_tag = 0.00 s = .
> SanitizersTest#test_should_allow_msub_tag = 0.00 s = .
> SanitizersTest#test_should_allow_msubsup_tag = 0.00 s = .
> SanitizersTest#test_remove_xpaths_removes_an_xpath = 0.00 s = .
> SanitizersTest#test_strip_links_with_tags_in_tags = 0.00 s = F
>
>
> Failure:
> SanitizersTest#test_strip_links_with_tags_in_tags
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:130]:
> --- expected
> +++ actual
> @@ -1 +1 @@
> -"<a href='hello'>all <b>day</b> long</a>"
> +"a href='hello'>all <b>day</b> long/a>"
>
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:127
>
> SanitizersTest#test_should_allow_ellipse_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert('XSS')>
> = 0.00 s = .
> SanitizersTest#test_should_allow_custom_tags_with_custom_attributes = 0.00 s
> = .
> SanitizersTest#test_should_allow_circle_tag = 0.00 s = .
> SanitizersTest#test_should_allow_caption_tag = 0.00 s = .
> SanitizersTest#test_should_allow_menu_tag = 0.00 s = .
> SanitizersTest#test_remove_xpaths_called_with_faulty_xpath = 0.00 s = .
> SanitizersTest#test_should_sanitize_with_trailing_space = 0.00 s = .
> SanitizersTest#test_should_allow_radialgradient_tag = 0.00 s = .
> SanitizersTest#test_should_allow_select_tag = 0.00 s = .
> SanitizersTest#test_remove_xpaths_called_with_enumerable_xpaths = 0.00 s = .
> SanitizersTest#test_setting_allowed_attributes_affects_sanitization = 0.00 s
> = .
> SanitizersTest#test_should_allow_header_tag = 0.00 s = .
> SanitizersTest#test_should_allow_textPath_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mfrac_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mrow_tag = 0.00 s = .
> SanitizersTest#test_should_allow_dfn_tag = 0.00 s = .
> SanitizersTest#test_should_allow_clippath_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG SRC="jav
> ascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_sanitize_half_open_scripts = 0.00 s = .
> SanitizersTest#test_should_allow_svg_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG SRC=" 
> javascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC="javascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_allow_blockquote_tag = 0.00 s = .
> SanitizersTest#test_should_allow_h2_tag = 0.00 s = .
> SanitizersTest#test_should_allow_code_tag = 0.00 s = .
> SanitizersTest#test_should_allow_msup_tag = 0.00 s = .
> SanitizersTest#test_should_allow_switch_tag = 0.00 s = .
> SanitizersTest#test_should_allow_msqrt_tag = 0.00 s = .
> SanitizersTest#test_should_allow_ol_tag = 0.00 s = .
> SanitizersTest#test_sanitize_ascii_8bit_string = 0.00 s = .
> SanitizersTest#test_sanitize_js_handlers = 0.00 s = .
> SanitizersTest#test_should_allow_article_tag = 0.00 s = .
> SanitizersTest#test_should_strip_href_attribute_in_a_with_bad_protocols =
> 0.00 s = .
> SanitizersTest#test_remove_xpaths_removes_all_occurrences_of_xpath = 0.00 s =
> .
> SanitizersTest#test_should_allow_mroot_tag = 0.00 s = .
> SanitizersTest#test_should_allow_aside_tag = 0.00 s = .
> SanitizersTest#test_should_allow_input_tag = 0.00 s = .
> SanitizersTest#test_strip_links_with_unclosed_tags = 0.00 s = .
> SanitizersTest#test_exclude_node_type_comment = 0.00 s = .
> SanitizersTest#test_remove_xpaths_called_with_xpath_string = 0.00 s = .
> SanitizersTest#test_should_allow_animatemotion_tag = 0.00 s = .
> SanitizersTest#test_should_allow_audio_tag = 0.00 s = .
> SanitizersTest#test_strip_tags_with_comment = 0.00 s = .
> SanitizersTest#test_sanitize_javascript_href = 0.00 s = .
> SanitizersTest#test_strip_unclosed_cdata = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC="jav
ascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_allow_acronym_tag = 0.00 s = .
> SanitizersTest#test_should_allow_radialGradient_tag = 0.00 s = .
> SanitizersTest#test_should_allow_font-face-src_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mspace_tag = 0.00 s = .
> SanitizersTest#test_strip_links_with_links = 0.00 s = .
> SanitizersTest#test_strip_tags_with_quote = 0.00 s = .
> SanitizersTest#test_should_allow_font-face-name_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mmultiscripts_tag = 0.00 s = .
> SanitizersTest#test_should_not_mangle_urls_with_ampersand = 0.00 s = .
> SanitizersTest#test_should_allow_image_src_attribute = 0.00 s = .
> SanitizersTest#test_video_poster_sanitization = 0.00 s = .
> SanitizersTest#test_should_allow_button_tag = 0.00 s = .
> SanitizersTest#test_should_allow_main_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mtable_tag = 0.00 s = .
> SanitizersTest#test_should_allow_semantics_tag = 0.00 s = .
> SanitizersTest#test_should_allow_big_tag = 0.00 s = .
> SanitizersTest#test_should_allow_maction_tag = 0.00 s = .
> SanitizersTest#test_should_allow_summary_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_attributes = 0.00 s = .
> SanitizersTest#test_should_allow_animatetransform_tag = 0.00 s = .
> SanitizersTest#test_should_allow_legend_tag = 0.00 s = .
> SanitizersTest#test_should_allow_meter_tag = 0.00 s = .
> SanitizersTest#test_sanitize_nested_script_in_style = 0.00 s = .
> SanitizersTest#test_should_allow_text_tag = 0.00 s = .
> SanitizersTest#test_should_allow_u_tag = 0.00 s = .
> SanitizersTest#test_should_allow_cite_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_ridiculous_hack = 0.00 s = .
> SanitizersTest#test_sanitize_data_attributes = 0.00 s = .
> SanitizersTest#test_should_allow_font-face_tag = 0.00 s = .
> SanitizersTest#test_should_allow_image_height_attribute = 0.00 s = .
> SanitizersTest#test_should_allow_samp_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mprescripts_tag = 0.00 s = .
> SanitizersTest#test_full_sanitize_respect_html_escaping_of_the_given_string =
> 0.00 s = .
> SanitizersTest#test_should_allow_optgroup_tag = 0.00 s = .
> SanitizersTest#test_should_block_script_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert('XSS')> = 0.00 s = .
> SanitizersTest#test_should_allow_address_tag = 0.00 s = .
> SanitizersTest#test_should_allow_line_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert('XSS')>
> = 0.00 s = .
> SanitizersTest#test_should_allow_h6_tag = 0.00 s = .
> SanitizersTest#test_should_allow_tr_tag = 0.00 s = .
> SanitizersTest#test_should_handle_non_html = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=`javascript:alert("RSnake says, 'XSS'")`> = 0.00 s = .
> SanitizersTest#test_should_allow_h4_tag = 0.00 s = .
> SanitizersTest#test_should_not_accept_non_loofah_inheriting_scrubber = 0.00 s
> = .
> SanitizersTest#test_uri_escaping_of_src_attr_in_a_tag_in_safe_list_sanitizer
> = 0.00 s = S
>
>
> Skipped:
> SanitizersTest#test_uri_escaping_of_src_attr_in_a_tag_in_safe_list_sanitizer
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:496]:
> Skipped, no message given
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:495
>
> SanitizersTest#test_should_allow_sub_tag = 0.00 s = .
> SanitizersTest#test_strip_links_with_linkception = 0.00 s = .
> SanitizersTest#test_custom_tags_overrides_allowed_tags = 0.00 s = .
> SanitizersTest#test_should_allow_textarea_tag = 0.00 s = .
> SanitizersTest#test_x03a_legitimate = 0.00 s = .
> SanitizersTest#test_allow_colons_in_path_component = 0.00 s = .
> SanitizersTest#test_should_allow_clipPath_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_div_background_image_unicode_encoded =
> 0.00 s = .
> SanitizersTest#test_should_allow_q_tag = 0.00 s = .
> SanitizersTest#test_should_allow_foreignobject_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_across_newlines = 0.00 s = .
> SanitizersTest#test_should_allow_mn_tag = 0.00 s = .
> SanitizersTest#test_should_allow_strike_tag = 0.00 s = .
> SanitizersTest#test_should_allow_colgroup_tag = 0.00 s = .
> SanitizersTest#test_should_allow_foreignObject_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mtext_tag = 0.00 s = .
> SanitizersTest#test_should_allow_thead_tag = 0.00 s = .
> SanitizersTest#test_should_allow_footer_tag = 0.00 s = .
> SanitizersTest#test_should_allow_option_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_illegal_style_properties = 0.00 s = .
> SanitizersTest#test_should_strip_src_attribute_in_img_with_bad_protocols =
> 0.00 s = .
> SanitizersTest#test_scrub_style_if_style_attribute_option_is_passed = 0.00 s
> = .
> SanitizersTest#test_strip_links_with_plaintext = 0.00 s = .
> SanitizersTest#test_should_allow_fieldset_tag = 0.00 s = .
> SanitizersTest#test_strip_tags_with_frozen_string = 0.00 s = .
> SanitizersTest#test_should_allow_sup_tag = 0.00 s = .
> SanitizersTest#test_should_allow_font_tag = 0.00 s = .
> SanitizersTest#test_uri_escaping_of_name_action_in_a_tag_in_safe_list_sanitizer
> = 0.00 s = S
>
>
> Skipped:
> SanitizersTest#test_uri_escaping_of_name_action_in_a_tag_in_safe_list_sanitizer
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:518]:
> Skipped, no message given
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:517
>
> SanitizersTest#test_should_allow_mask_tag = 0.00 s = .
> SanitizersTest#test_should_allow_time_tag = 0.00 s = .
> SanitizersTest#test_should_allow_set_tag = 0.00 s = .
> SanitizersTest#test_should_allow_symbol_tag = 0.00 s = .
> SanitizersTest#test_should_allow_bdi_tag = 0.00 s = .
> SanitizersTest#test_should_allow_none_tag = 0.00 s = .
> SanitizersTest#test_should_allow_small_tag = 0.00 s = .
> SanitizersTest#test_should_allow_map_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_neverending_attribute = 0.00 s = .
> SanitizersTest#test_should_allow_textpath_tag = 0.00 s = .
> SanitizersTest#test_should_allow_annotation-xml_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mtr_tag = 0.00 s = .
> SanitizersTest#test_should_allow_nav_tag = 0.00 s = .
> SanitizersTest#test_sanitize_nested_script = 0.00 s = .
> SanitizersTest#test_should_allow_defs_tag = 0.00 s = .
> SanitizersTest#test_sanitize_plaintext = 0.00 s = .
> SanitizersTest#test_should_allow_animateColor_tag = 0.00 s = .
> SanitizersTest#test_strip_links_with_line_feed_and_uppercase_tag = 0.00 s = .
> SanitizersTest#test_custom_attributes_overrides_allowed_attributes = 0.00 s =
> .
> SanitizersTest#test_should_allow_bdo_tag = 0.00 s = .
> SanitizersTest#test_should_allow_filter_tag = 0.00 s = .
> SanitizersTest#test_strip_tags_with_tags = 0.00 s = .
> SanitizersTest#test_should_allow_i_tag = 0.00 s = .
> SanitizersTest#test_x03a_handling_1 = 0.00 s = .
> SanitizersTest#test_should_allow_ul_tag = 0.00 s = .
> SanitizersTest#test_should_allow_tfoot_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mphantom_tag = 0.00 s = .
> SanitizersTest#test_should_allow_strong_tag = 0.00 s = .
> SanitizersTest#test_should_allow_table_tag = 0.00 s = .
> SanitizersTest#test_should_allow_section_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_xul_style_attributes = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=JaVaScRiPt:alert('XSS')> = 0.00 s = .
> SanitizersTest#test_should_allow_animateTransform_tag = 0.00 s = .
> SanitizersTest#test_should_allow_output_tag = 0.00 s = .
> SanitizersTest#test_should_allow_feGaussianBlur_tag = 0.00 s = .
> SanitizersTest#test_sanitizer_sanitize_raises_not_implemented_error = 0.00 s
> = .
> SanitizersTest#test_should_allow_hr_tag = 0.00 s = .
> SanitizersTest#test_should_raise_argument_error_if_tags_is_not_enumerable =
> 0.00 s = .
> SanitizersTest#test_should_allow_center_tag = 0.00 s = .
> SanitizersTest#test_should_allow_command_tag = 0.00 s = .
> SanitizersTest#test_should_allow_img_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mstyle_tag = 0.00 s = .
> SanitizersTest#test_should_accept_loofah_inheriting_scrubber = 0.00 s = .
> SanitizersTest#test_should_allow_path_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_cdata_section = 0.00 s = .
> SanitizersTest#test_should_sanitize_div_style_expression = 0.00 s = .
> SanitizersTest#test_should_allow_math_tag = 0.00 s = .
> SanitizersTest#test_should_allow_polyline_tag = 0.00 s = .
> SanitizersTest#test_should_allow_tbody_tag = 0.00 s = .
> SanitizersTest#test_should_allow_image_alt_attribute = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert("XSS")> = 0.00 s = .
> SanitizersTest#test_should_allow_del_tag = 0.00 s = .
> SanitizersTest#test_should_allow_animateMotion_tag = 0.00 s = .
> SanitizersTest#test_should_allow_fegaussianblur_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mo_tag = 0.00 s = .
> SanitizersTest#test_should_allow_ins_tag = 0.00 s = .
> SanitizersTest#test_escape_tags_with_many_open_quotes = 0.00 s = F
>
>
> Failure:
> SanitizersTest#test_escape_tags_with_many_open_quotes
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:104]:
> --- expected
> +++ actual
> @@ -1 +1,3 @@
> -"<<"
> +# encoding: US-ASCII
> +# valid: true
> +""
>
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:103
>
> SanitizersTest#test_sanitize_script = 0.00 s = .
> SanitizersTest#test_should_allow_h3_tag = 0.00 s = .
> SanitizersTest#test_strip_invalid_html = 0.00 s = F
>
>
> Failure:
> SanitizersTest#test_strip_invalid_html
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:61]:
> --- expected
> +++ actual
> @@ -1 +1,3 @@
> -"<<"
> +# encoding: US-ASCII
> +# valid: true
> +""
>
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:60
>
> SanitizersTest#test_should_allow_em_tag = 0.00 s = .
> SanitizersTest#test_should_allow_custom_tags = 0.00 s = .
> SanitizersTest#test_should_allow_dd_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mi_tag = 0.00 s = .
> SanitizersTest#test_strip_tags_multiline = 0.00 s = .
> SanitizersTest#test_should_allow_anchors = 0.00 s = .
> SanitizersTest#test_should_allow_li_tag = 0.00 s = .
> SanitizersTest#test_uri_escaping_of_name_attr_in_a_tag_in_safe_list_sanitizer
> = 0.00 s = S
>
>
> Skipped:
> SanitizersTest#test_uri_escaping_of_name_attr_in_a_tag_in_safe_list_sanitizer
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:507]:
> Skipped, no message given
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:506
>
> SanitizersTest#test_should_allow_datalist_tag = 0.00 s = .
> SanitizersTest#test_should_allow_tt_tag = 0.00 s = .
> SanitizersTest#test_should_allow_abbr_tag = 0.00 s = .
> SanitizersTest#test_should_allow_h5_tag = 0.00 s = .
> SanitizersTest#test_should_allow_s_tag = 0.00 s = .
> SanitizersTest#test_should_allow_polygon_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mark_tag = 0.00 s = .
> SanitizersTest#test_should_allow_munderover_tag = 0.00 s = .
> SanitizersTest#test_should_allow_rect_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC="jav
ascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_allow_use_tag = 0.00 s = .
> SanitizersTest#test_should_allow_marker_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC=javascript:alert('XSS')>
> = 0.00 s = .
> SanitizersTest#test_should_handle_blank_text = 0.00 s = .
> SanitizersTest#test_should_allow_munder_tag = 0.00 s = .
> SanitizersTest#test_uri_escaping_of_href_attr_in_a_tag_in_safe_list_sanitizer
> = 0.00 s = S
>
>
> Skipped:
> SanitizersTest#test_uri_escaping_of_href_attr_in_a_tag_in_safe_list_sanitizer
> [/<<PKGBUILDDIR>>/test/sanitizer_test.rb:485]:
> Skipped, no message given
>
> rails test <<PKGBUILDDIR>>/test/sanitizer_test.rb:484
>
> SanitizersTest#test_should_sanitize_tag_broken_up_by_null = 0.00 s = .
> SanitizersTest#test_should_allow_mpath_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_unclosed_script = 0.00 s = .
> SanitizersTest#test_strip_links_leaves_nonlink_tags = 0.00 s = .
> SanitizersTest#test_should_allow_only_custom_tags = 0.00 s = .
> SanitizersTest#test_should_allow_dt_tag = 0.00 s = .
> SanitizersTest#test_should_allow_animate_tag = 0.00 s = .
> SanitizersTest#test_custom_scrubber_takes_precedence_over_other_options =
> 0.00 s = .
> SanitizersTest#test_should_allow_video_tag = 0.00 s = .
> SanitizersTest#test_setting_allowed_tags_affects_sanitization = 0.00 s = .
> SanitizersTest#test_should_allow_annotation_tag = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC="javascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_allow_desc_tag = 0.00 s = .
> SanitizersTest#test_should_allow_p_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_non_alpha_and_non_digit_characters_in_tags
> = 0.00 s = .
> SanitizersTest#test_should_allow_td_tag = 0.00 s = .
> SanitizersTest#test_allow_data_attribute_if_requested = 0.00 s = .
> SanitizersTest#test_should_allow_metadata_tag = 0.00 s = .
> SanitizersTest#test_should_allow_mtd_tag = 0.00 s = .
> SanitizersTest#test_should_allow_div_tag = 0.00 s = .
> SanitizersTest#test_should_allow_details_tag = 0.00 s = .
> SanitizersTest#test_should_allow_hkern_tag = 0.00 s = .
> SanitizersTest#test_should_allow_image_width_attribute = 0.00 s = .
> SanitizersTest#test_should_allow_label_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_img_dynsrc_lowsrc = 0.00 s = .
> SanitizersTest#test_x03a_handling_2 = 0.00 s = .
> SanitizersTest#test_should_allow_mfenced_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_invalid_tag_names_in_single_tags = 0.00 s
> = .
> SanitizersTest#test_should_accept_loofah_scrubber_that_wraps_a_block = 0.00 s
> = .
> SanitizersTest#test_remove_unclosed_tags = 0.00 s = .
> SanitizersTest#test_should_not_fall_for_xss_image_hack_<IMG
> SRC="jav	ascript:alert('XSS');"> = 0.00 s = .
> SanitizersTest#test_should_allow_a_tag = 0.00 s = .
> SanitizersTest#test_should_sanitize_img_vbscript = 0.00 s = .
> SanitizersTest#test_should_raise_argument_error_if_attributes_is_not_enumerable
> = 0.00 s = .
> SanitizersTest#test_should_allow_tspan_tag = 0.00 s = .
> SanitizersTest#test_should_allow_var_tag = 0.00 s = .
> SanitizersTest#test_should_allow_custom_tags_with_attributes = 0.00 s = .
> SanitizersTest#test_sanitize_form = 0.00 s = .
> PermitScrubberTest#test_leaves_supplied_tags = 0.00 s = .
> PermitScrubberTest#test_attributes_accessor_validation = 0.00 s = .
> PermitScrubberTest#test_responds_to_scrub = 0.00 s = .
> PermitScrubberTest#test_leaves_only_supplied_tags_nested = 0.00 s = .
> PermitScrubberTest#test_skips_text_nodes = 0.00 s = .
> PermitScrubberTest#test_leaves_only_supplied_tags = 0.00 s = .
> PermitScrubberTest#test_default_attributes_removal_behavior = 0.00 s = .
> PermitScrubberTest#test_leaves_only_supplied_attributes = 0.00 s = .
> PermitScrubberTest#test_leaves_comments_when_supplied_as_tag = 0.00 s = .
> PermitScrubberTest#test_tags_accessor_validation = 0.00 s = .
> PermitScrubberTest#test_default_scrub_removes_processing_instructions = 0.00
> s = .
> PermitScrubberTest#test_default_scrub_behavior = 0.00 s = .
> PermitScrubberTest#test_leaves_only_supplied_tags_and_attributes = 0.00 s = .
> PermitScrubberTest#test_leaves_supplied_attributes = 0.00 s = .
> PermitScrubberTest#test_leaves_text = 0.00 s = .
> PermitScrubberTest#test_default_scrub_removes_comments = 0.00 s = .
> PermitScrubberTest#test_leaves_supplied_tags_and_attributes = 0.00 s = .
> TargetScrubberTest#test_targeting_tags_and_attributes_removes_only_them =
> 0.00 s = .
> TargetScrubberTest#test_targeting_tags_removes_only_them = 0.00 s = .
> TargetScrubberTest#test_targeting_tags_removes_only_them_nested = 0.00 s = .
> TargetScrubberTest#test_targeting_attributes_removes_only_them = 0.00 s = .
> ReturningStopFromScrubNodeTest#test_returns_stop_from_scrub_if_scrub_node_does
> = 0.00 s = .
>
> Finished in 0.192027s, 1624.7727 runs/s, 1692.4715 assertions/s.
> 312 runs, 325 assertions, 5 failures, 0 errors, 4 skips
> rake aborted!
> Command failed with status (1): [ruby -w
> /usr/share/rubygems-integration/all/gems/rake-13.0.6/lib/rake/rake_test_loader.rb
> "test/sanitizer_test.rb" "test/scrubbers_test.rb" -v]
> /usr/share/rubygems-integration/all/gems/rake-13.0.6/exe/rake:27:in `<top
> (required)>'
> Tasks: TOP => default
> (See full trace by running task with --trace)
> ERROR: Test "ruby3.0" failed.
The full build log is available from:
http://qa-logs.debian.net/2022/03/26/ruby-rails-html-sanitizer_1.4.2-2_unstable.log
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
If you reassign this bug to another package, please marking it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects
If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.
--- End Message ---
--- Begin Message ---
Source: ruby-rails-html-sanitizer
Source-Version: 1.4.3-0.1
Done: Adrian Bunk <b...@debian.org>
We believe that the bug you reported is fixed in the latest version of
ruby-rails-html-sanitizer, which is due to be installed in the Debian FTP
archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1008...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Adrian Bunk <b...@debian.org> (supplier of updated ruby-rails-html-sanitizer
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Oct 2022 02:44:52 +0300
Source: ruby-rails-html-sanitizer
Architecture: source
Version: 1.4.3-0.1
Distribution: unstable
Urgency: low
Maintainer: Debian Ruby Team
<pkg-ruby-extras-maintain...@lists.alioth.debian.org>
Changed-By: Adrian Bunk <b...@debian.org>
Closes: 1008324
Changes:
ruby-rails-html-sanitizer (1.4.3-0.1) unstable; urgency=low
.
* Non-maintainer upload.
* New upstream release.
- Fixes FTBFS with Ruby 3. (Closes: #1008324)
- CVE-2022-32209: Possible XSS vulnerability.
Checksums-Sha1:
76d62bbcc53e5a68dcba249bd38335fb00a8be08 2270
ruby-rails-html-sanitizer_1.4.3-0.1.dsc
736b1e11934b4e2e48d53516acd7f81a8825eb0c 14656
ruby-rails-html-sanitizer_1.4.3.orig.tar.gz
33230ee0fca12bad9371fef04bc7804a903a7362 4080
ruby-rails-html-sanitizer_1.4.3-0.1.debian.tar.xz
Checksums-Sha256:
5bbde09ec7709bb5cca03b8596606cbeadbee78ed01fc83cdf517827b2a66985 2270
ruby-rails-html-sanitizer_1.4.3-0.1.dsc
c799ba89d3af30ff96b2ff7a41a5c2ba23203b4e52f02564a4928403776cf76c 14656
ruby-rails-html-sanitizer_1.4.3.orig.tar.gz
0304ad673ef87335ff14b6989fae793d4663027f7fce0c1c31a3ef3f9b7779f5 4080
ruby-rails-html-sanitizer_1.4.3-0.1.debian.tar.xz
Files:
40b4bc96536da551f24860ccaf64099e 2270 ruby optional
ruby-rails-html-sanitizer_1.4.3-0.1.dsc
683b09b24147c038a5441f218b39cbac 14656 ruby optional
ruby-rails-html-sanitizer_1.4.3.orig.tar.gz
97300fee77e7300e499027ac81118e2c 4080 ruby optional
ruby-rails-html-sanitizer_1.4.3-0.1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=GBqw
-----END PGP SIGNATURE-----
--- End Message ---
