actionview 5.1.0.beta1 → 5.1.0.rc1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 880105b5ed594d2cc79d3a304d171cfb83a0dc0f
-  data.tar.gz: 0ca69dafd2c2eb49ecc9e4de449185c9f10a53a3
+  metadata.gz: 974f03d4be8566e900f33b4c6ee6f9620fd38cb6
+  data.tar.gz: e407330e93d17a9221dfa8d4163dccc21bd85716
 SHA512:
-  metadata.gz: 2ac225c63c185e593d78cabbd1a98de42614fae3ee5dad779310fa3d30d6c2821ba6609c75169dfd1bcdbddde1a3db2465d15610c17d5cb3abb94c35d46f1c6b
-  data.tar.gz: 643953d2d815c89802a813162797b67da2d1150b2cfe77a14870fa7693f1e95f31066f9ddccfeb238e447b805b932b75865d27dd2a4b275080ee6a9b23d04095
+  metadata.gz: 699a6ea357b4c49857b14e3ade96b57e95b109f75d87d3f486bbf8d015e47bca3663244a3e70647ddded00a3f50b6e799a3e8911f7ff79e376e219b79a313b67
+  data.tar.gz: 3405bd46476e22cd4f10a724ee72afd14ef687bf7204ff9314bcf865e04e0d07252551bc60ef35d3a9c738391d394cfbe593e8c0445621fce8fa005267ca167a

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+## Rails 5.1.0.rc1 (March 20, 2017) ##
+
+*   Remove the option `encode_special_chars` misnomer from `strip_tags`
+
+    As of rails-html-sanitizer v1.0.3, the sanitizer will ignore the
+    `encode_special_chars` option.
+
+    Fixes #28060.
+
+    *Andrew Hood*
+
 ## Rails 5.1.0.beta1 (February 23, 2017) ##
 
 *   Change the ERB handler from Erubis to Erubi.
@@ -90,6 +101,23 @@
 
     *Peter Schilling*, *Matthew Draper*
 
+*   Add `:skip_pipeline` option to several asset tag helpers
+
+    `javascript_include_tag`, `stylesheet_link_tag`, `favicon_link_tag`,
+    `image_tag` and `audio_tag` now accept a `:skip_pipeline` option which can
+    be set to true to bypass the asset pipeline and serve the assets from the
+    public folder.
+
+    *Richard Schneeman*
+
+*   Add `:poster_skip_pipeline` option to the `video_tag` helper
+
+    `video_tag` now accepts a `:poster_skip_pipeline` option which can be used
+    in combination with the `:poster` option to bypass the asset pipeline and
+    serve the poster image for the video from the public folder.
+
+    *Richard Schneeman*
+
 *   Show cache hits and misses when rendering partials.
 
     Partials using the `cache` helper will show whether a render hit or missed

data/lib/action_view/gem_version.rb

@@ -8,7 +8,7 @@ module ActionView
     MAJOR = 5
     MINOR = 1
     TINY  = 0
-    PRE   = "beta1"
+    PRE   = "rc1"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_view/helpers/sanitize_helper.rb

@@ -13,6 +13,7 @@ module ActionView
       # It also strips href/src attributes with unsafe protocols like
       # <tt>javascript:</tt>, while also protecting against attempts to use Unicode,
       # ASCII, and hex character references to work around these protocol filters.
+      # All special characters will be escaped.
       #
       # The default sanitizer is Rails::Html::WhiteListSanitizer. See {Rails HTML
       # Sanitizers}[https://github.com/rails/rails-html-sanitizer] for more information.
@@ -20,8 +21,7 @@ module ActionView
       # Custom sanitization rules can also be provided.
       #
       # Please note that sanitizing user-provided text does not guarantee that the
-      # resulting markup is valid or even well-formed. For example, the output may still
-      # contain unescaped characters like <tt><</tt>, <tt>></tt>, or <tt>&</tt>.
+      # resulting markup is valid or even well-formed.
       #
       # ==== Options
       #
@@ -86,7 +86,7 @@ module ActionView
         self.class.white_list_sanitizer.sanitize_css(style)
       end
 
-      # Strips all HTML tags from +html+, including comments.
+      # Strips all HTML tags from +html+, including comments and special characters.
       #
       #   strip_tags("Strip <i>these</i> tags!")
       #   # => Strip these tags!
@@ -96,8 +96,11 @@ module ActionView
       #
       #   strip_tags("<div id='top-bar'>Welcome to my website!</div>")
       #   # => Welcome to my website!
+      #
+      #   strip_tags("> A quote from Smith & Wesson")
+      #   # => &gt; A quote from Smith &amp; Wesson
       def strip_tags(html)
-        self.class.full_sanitizer.sanitize(html, encode_special_chars: false)
+        self.class.full_sanitizer.sanitize(html)
       end
 
       # Strips all link tags from +html+ leaving just the link text.
@@ -110,6 +113,9 @@ module ActionView
       #
       #   strip_links('Blog: <a href="http://www.myblog.com/" class="nav" target=\"_blank\">Visit</a>.')
       #   # => Blog: Visit.
+      #
+      #   strip_links('<<a href="https://example.org">malformed & link</a>')
+      #   # => &lt;malformed &amp; link
       def strip_links(html)
         self.class.link_sanitizer.sanitize(html)
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionview
 version: !ruby/object:Gem::Version
-  version: 5.1.0.beta1
+  version: 5.1.0.rc1
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-02-23 00:00:00.000000000 Z
+date: 2017-03-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
 - !ruby/object:Gem::Dependency
   name: builder
   requirement: !ruby/object:Gem::Requirement
@@ -92,28 +92,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.1.0.beta1
+        version: 5.1.0.rc1
 description: Simple, battle-tested conventions and helpers for building web pages.
 email: david@loudthinking.com
 executables: []