File rubygem-rack-CVE-2024-26146.patch of Package rubygem-rack
diff --git a/lib/rack/utils.rb b/lib/rack/utils.rb
index 8f8e317a..d61b1e01 100644
--- a/lib/rack/utils.rb
+++ b/lib/rack/utils.rb
@@ -140,8 +140,8 @@ module Rack
module_function :build_nested_query
def q_values(q_value_header)
- q_value_header.to_s.split(/\s*,\s*/).map do |part|
- value, parameters = part.split(/\s*;\s*/, 2)
+ q_value_header.to_s.split(',').map do |part|
+ value, parameters = part.split(';', 2).map(&:strip)
quality = 1.0
if md = /\Aq=([\d.]+)/.match(parameters)
quality = md[1].to_f