Ruby 1.9.3-p385 is released | Hacker News Reader

Ruby 1.9.3-p385 is released

ruby-lang.org

53 pointscbetta7 comments

    echo "--no-ri --no-rdoc" >> ~/.gemrc

install every gem much faster, avoid rdoc vulnerabilities. Since gem installation can run arbitrary code, I am suspicious of rdoc xss vulnerabilities being a cause for concern (if you are not running a publicly-accessible gem documentation site...)

This will run these options for every gem command though. Better restrict it to install and update.

Is it a problem that this gets passed to every gem command?

Yes because it does not make sense to pass it to some commands. For instance, what would `gem list --no-rdoc --local` mean? You will get a lot of invalid option errors.

Like so:

    install: --no-rdoc --no-ri 
    update:  --no-rdoc --no-ri

Also add --env-shebang so that you don't get stupid shebang lines which lock you to a specific interpreter.

The .gemrc file is YAML [1], does that even work without "gem:" in front? Mine looks like this:

    gem: --no-rdoc --no-ri --both
    verbose: true
    update_sources: true
    sources:
    - http://rubygems.org/
    backtrace: false
    bulk_threshold: 1000
    benchmark: false

[1] http://docs.rubygems.org/read/chapter/11

Reply on news.ycombinator.com