🧪 Fix Ruby 2.4 auth sanitizer subprocess spec

Author: pboling

CHANGELOG.md

@@ -47,8 +47,9 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Fixed
 
-- Constrained the Ruby 2.4 appraisal away from `cgi` 0.1.1, which calls
-  `String#delete_prefix` before oauth's test backports are loaded.
+- Updated the auth-sanitizer subprocess isolation spec to load the standard
+  test bootstrap, including Ruby 2.4 backports.
+- Made the Ruby 2.4 appraisal's legacy `cgi` dependency explicit.
 
 ## [1.1.7] - 2026-06-15
 

gemfiles/modular/cgi/r2/v0.1.gemfile

@@ -0,0 +1,3 @@
+# Ruby >= 0
+# Last version to support Ruby <= 2.4
+gem "cgi", "~> 0.1.1"

gemfiles/modular/x_std_libs/r2.4/libs.gemfile

@@ -1,4 +1,4 @@
 eval_gemfile "../../erb/r2.6/v2.2.gemfile"
-gem "cgi", "< 0.1.1" # cgi 0.1.1 calls String#delete_prefix, which Ruby 2.4 lacks.
+eval_gemfile "../../cgi/r2/v0.1.gemfile"
 eval_gemfile "../../mutex_m/r2.4/v0.1.gemfile"
 eval_gemfile "../../stringio/r2.4/v0.0.2.gemfile"

spec/oauth/auth_sanitizer_spec.rb

@@ -6,9 +6,12 @@
 RSpec.describe "OAuth::AUTH_SANITIZER" do
   it "keeps auth-sanitizer constants isolated inside the OAuth namespace" do
     lib = File.expand_path("../../../lib", __dir__)
+    spec = File.expand_path("..", __dir__)
     script = <<~RUBY
       $LOAD_PATH.unshift(#{lib.inspect})
-      require "oauth"
+      $LOAD_PATH.unshift(#{spec.inspect})
+      require "rspec/core"
+      require "spec_helper"
       abort "Auth was defined" if Object.const_defined?(:Auth, false)
       abort "AuthSanitizer was defined" if Object.const_defined?(:AuthSanitizer, false)
     RUBY