Be stricter when accepting rubygem source URIs

Since `URI#parse` accepts URIs such as "http:rubygems.org" as per RFC 2396,
we reject such sources manually early in the process, in order to provide more
helpful error messages.

Fixes #3925.

1 files changed, 8 insertions, 0 deletions

diff --git a/spec/bundler/source/rubygems_spec.rb b/spec/bundler/source/rubygems_spec.rb
index af959a770e..33cb3672dc 100644
--- a/spec/bundler/source/rubygems_spec.rb
+++ b/spec/bundler/source/rubygems_spec.rb
@@ -22,4 +22,12 @@ describe Bundler::Source::Rubygems do
       end
     end
   end
+
+  describe "#add_remote" do
+    context "when the source is an HTTP(s) URI with no host" do
+      it "raises error" do
+        expect { subject.add_remote("https:rubygems.org") }.to raise_error(ArgumentError)
+      end
+    end
+  end
 end