nickboucher / trojan-source

Trojan Source: Invisible Vulnerabilities
https://trojansource.codes
MIT License
1.24k stars 266 forks source link

Add Ruby As a Vulnerable Language #15

Open security-curious opened 2 years ago

security-curious commented 2 years ago

Per the feedback at https://github.com/nickboucher/trojan-source/issues/9#issuecomment-962087735 that you are open to have Ruby examples:

a7f0aee adds the same examples that are in the other languages. Homoglyph method names and invisible functions are sort of "yawn" with Ruby given it's support for monkey-patching. It would be easier to just define the method again with the same name. But included them for completeness. Tried to follow the style of the other languages.

49d8720 adds some additional variations that are probably not applicable to every language but may be applicable to some other languages.

I did reach out to the Ruby security team to see if they want to address. They responded with "at the moment, our opinion is that the interpreter is not the right place for a fix".