no cache attacks possible, static input (CSS)

korny · korny · commit 05f5a0e270ce · 2013-07-21T20:45:33.000+02:00
diff --git a/lib/coderay/encoders/html/css.rb b/lib/coderay/encoders/html/css.rb
@@ -21,7 +21,6 @@ def initialize style = :default
       end
 
       def get_style_for_css_classes css_classes
-        # FIXME: cache attack
         cl = @styles[css_classes.first]
         return '' unless cl
         style = ''
@@ -53,7 +52,6 @@ def parse stylesheet
           for selector in selectors.split(',')
             classes = selector.scan(/[-\w]+/)
             cl = classes.pop
-            # FIXME: cache attack
             @styles[cl] ||= Hash.new
             @styles[cl][classes] = style.to_s.strip.delete(' ').chomp(';')
           end
