If drop_privileges is set to false (default is true), the trusted_path function does check if the path is trusted or not and returns false if this isn't the case. If this conditional path is not hit, there is no return true, which leaves the state of the function 'nil', thus being false.
If drop_privileges is set to false (default is true), the trusted_path function does check if the path is trusted or not and returns false if this isn't the case. If this conditional path is not hit, there is no return true, which leaves the state of the function 'nil', thus being false.
This change should account for the true case.