Install location safety should consider casing

rubygems · Oct 8, 2021 · 0a0ad34 · 0a0ad34
1 parent 25524eb
commit 0a0ad34
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/rubygems/package.rb b/lib/rubygems/package.rb
@@ -471,7 +471,7 @@ def install_location(filename, destination_dir) # :nodoc:
     destination = File.expand_path(filename, destination_dir)
 
     raise Gem::Package::PathError.new(destination, destination_dir) unless
-      destination.start_with? destination_dir + '/'
+      normalize_path(destination).start_with? normalize_path(destination_dir + '/')
 
     begin
       real_destination = File.expand_path(File.realpath(destination))