Hi matz,

Yukihiro Matsumoto wrote:
> Of course both of them are unsafe.  It's not easy to persuade akr (the
> author of open-uri).  He's way clever than me.
>   

It's not a matter of his personality.  Don't shift the blame onto akr. 
I'll also against userinfo being usable in the open-uri.