The latest changesets to Ruby 1.9.2 no longer make the current directory .
part of your LOAD_PATH
. I have a non-trivial number of Rakefiles that assume that .
is part of the LOAD_PATH
, so this broke them (they reported "no such file to load" for all require statements that based off the project path). Was there a particular justification for doing this?
As for a fix, adding $: << "."
everywhere works, but seems incredibly hacky and I don't want to do that. What's the preferred way to make my Rakefiles 1.9.2+ compatible?
It was deemed a "security" risk.
You can get around it by using absolute paths
or doing
or by using
or adding an "include" directory
or the same, using irb;
Use
require_relative 'file_to_require'
Throw this in your code to make require_relative work in 1.8.7:
I found this to be a confounding change until I realized a couple of things.
You can set RUBYLIB in your .profile (Unix) and go on with life as you did before:
export RUBYLIB="."
But as mentioned above, it's long been considered unsafe to do so.
For the vast majority of cases you can avoid problems by simply calling your Ruby scripts with a prepended '.' e.g. ./scripts/server.
As others answers point out, it's a security risk because
.
in your load path refers to the present working directoryDir.pwd
, not the directory of the current file being loaded. So whoever is executing your script can change this simply bycd
ing to another directory. Not good!I've been using full paths constructed from
__FILE__
as an alternative.Unlike
require_relative
, this is backward compatible with Ruby 1.8.7.There's two reasons:
Both are based on the same underlying principle: in general, you simply cannot know what the current directory is, when your code is run. Which means that, when you require a file and depend on it being in the current directory, you have no way of controlling whether that file will even be there, or whether it is the file that you actually expect to be there.
As Jörg W Mittag pointed out, I think what you want to be using is
require_relative
so the file you require is relative to the source file of therequire
declaration and not the current working dir.Your dependencies should be relative to your rake build file.