File 0005-CVE-2021-22904.patch of Package rubygem-actionpack-5_1.30088
--- actionpack-5.1.4/lib/action_controller/metal/http_authentication.rb.old 2022-06-02 14:56:28.220959824 +0200 +++ actionpack-5.1.4/lib/action_controller/metal/http_authentication.rb 2022-06-02 14:56:54.805151166 +0200 @@ -407,7 +407,7 @@ module Token TOKEN_KEY = "token=" TOKEN_REGEX = /^(Token|Bearer)\s+/ - AUTHN_PAIR_DELIMITERS = /(?:,|;|\t+)/ + AUTHN_PAIR_DELIMITERS = /(?:,|;|\t)/ extend self module ControllerMethods