Ruby: Attacker can smuggle a malicious domain in a URI object.

Simple example: userprovidedredirecturi = "http:////malware.com/real/path" eviluri = URI.parseuserprovidedredirecturi eviluri.host = nil eviluri.tos = "http://malware.com/real/path" In many common URI-validation scenarios, the target system will likely parse a user provided URI, and then check th...