Skip to content

Remove test files from gem - #405

Merged
jdleesmiller merged 1 commit into
masterfrom
remove-test-files
Sep 25, 2019
Merged

jdleesmiller merged 1 commit into
masterfrom
remove-test-files

Conversation

@jdleesmiller

Copy link
Copy Markdown
Member

Remove the test_files from the gemspec, because rubyzip's test files are quite large now and include some malicious zip files that trigger virus scanners on machines that have the gem installed.

Fix #384 .

The trend in ruby/rubygems#735 seems to be to remove test_files files from the gemspec. There is some good discussion in that ticket about why this may not be the best thing to do long term (pending changes in rubygems to better support test files), but it does seem to be the preferred approach at the moment.

I am planning to add this to the upcoming 2.0 release. I will leave this open for approximately one week for comment.

CC @MaximeDerche @GElkayam

@hainesr

hainesr commented Sep 21, 2019

Copy link
Copy Markdown
Member

I think this is a sensible change.

@jdleesmiller
jdleesmiller merged commit 3641a96 into master Sep 25, 2019
@jdleesmiller
jdleesmiller deleted the remove-test-files branch September 25, 2019 19:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tests for the Zip Slip vuln raise alarms by ClamAV antivirus...

2 participants