RubyGems disclosed on HackerOne: Delete directory using symlink...

In 2.7.6, the safety of symlink is confirmed with `mkdir_p_safe`, Before that `FileUtils.rm_rf destination` is running. Therefore, if `tmp/dir` is specified after `tmp -> /tmp`, the following `/tmp/dir` is deleted. ### Proof of concept #### builder.rb ```ruby require 'rubygems/package' class Ge…