6 ms·

Ruby 1.9.3-p385 is released

• aaronblohowiak 14y ago
  echo "--no-ri --no-rdoc" >> ~/.gemrc install every gem much faster, avoid rdoc vulnerabilities. Since gem installation can run arbitrary code, I am suspicious of rdoc xss vulnerabilities being a cause for concern (if you are not running a publicly-accessible gem documentation site...)
  • why-el 14y ago
    This will run these options for every gem command though. Better restrict it to install and update.
    • kawsper 14y ago
      Is it a problem that this gets passed to every gem command?
      • why-el 14y ago
        Yes because it does not make sense to pass it to some commands. For instance, what would `gem list --no-rdoc --local` mean? You will get a lot of invalid option errors.
    • scraplab 14y ago
      Like so: install: --no-rdoc --no-ri update: --no-rdoc --no-ri
      • regularfry 14y ago
        Also add --env-shebang so that you don't get stupid shebang lines which lock you to a specific interpreter.
  • lobster_johnson 14y ago
    The .gemrc file is YAML [1], does that even work without "gem:" in front? Mine looks like this: gem: --no-rdoc --no-ri --both verbose: true update_sources: true sources: - http://rubygems.org/ backtrace: false bulk_threshold: 1000 benchmark: false [1] http://docs.rubygems.org/read/chapter/11 http://docs.rubygems.org/read/chapter/11