ansi_stream 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7963159e6b8f55013940f0de7ec2ce479edeca00
-  data.tar.gz: a78a4f840277d912dd7208ac9d769223c503f08f
+  metadata.gz: 70f3e27b64b52f52548995562513d0a00254625c
+  data.tar.gz: 430f37a7a11f7b9192ffa5370c852b4c399ed8c1
 SHA512:
-  metadata.gz: b9453d419669d24ca7c8108640cdbfd18bd33ea84b11c4896dd8be046f3fca210dff89df5e29ae1f37ad01b2fc202ddc062eba9476a31f2f5b37f9cf99611a2c
-  data.tar.gz: fe33e808d60e502a3152e10db4d9df0879b78b0d7239ff68d5184caa2c53fabc26b7d5a2e50dc36e9260536657a40bd2bb12ff92c77c48e576fda105d55366f4
+  metadata.gz: 373361dc71facf4e3d51f6554d3a3cebb17174ad0c15d0f53f85acf74879de9ba30522de824ccc1a361ada452293b60e8714e3e8253f2bb107c8e6002e6b721c
+  data.tar.gz: eb0e68dcf25828b9372aac543d515fcce23df7106e5b1da346b9c41c84f3439f09de6bd3977ae9cc11d56d42260314f1c480a911171dc26b1171686dcb76a5e0

data/lib/ansi_stream/version.rb

@@ -1,3 +1,3 @@
 module AnsiStream
-  VERSION = "0.0.5"
+  VERSION = "0.0.6"
 end

data/spec/javascripts/ansi_stream_spec.coffee

@@ -12,6 +12,11 @@ describe "AnsiStream", ->
     expectClass(span, 'ansi-foreground-default')
     expect(span.innerHTML).toBe('mkdir')
 
+
+  it 'is not subject to XSS', ->
+    span = stream.process("echo <script>alert('pwned!')").childNodes[0]
+    expect(span.innerHTML).toBe("echo &lt;script&gt;alert('pwned!')")
+
   it 'returns colorized spans if there is an foreground color code', ->
     expectClass(stream.process('\u001B[31mtoto').childNodes[0], 'ansi-foreground-red')
 
@@ -36,3 +41,6 @@ describe "AnsiStream", ->
     spans = stream.process("\u001B[4mtoto\u001B[24mtiti")
     expectClass(spans.childNodes[0], 'ansi-underline')
     expect(spans.childNodes[1].className.indexOf('ansi-underline')).toBe(-1)
+
+  it 'can strip ANSI codes from a string', ->
+    expect(AnsiStream.strip('\u001B[31mtoto')).toBe('toto')

data/vendor/assets/javascripts/ansi_stream.coffee

@@ -1,4 +1,17 @@
 class @AnsiStream
+  ANSI_CODE = ///
+    ((\u001b\[)|\u009b)
+    (
+      \d{0,3}
+      (;\d{0,3})*
+      [A-M|f-m]
+    )
+    |\u001b[A-M]
+  ///g
+
+  @strip: (text) ->
+    text.replace(ANSI_CODE, '')
+
   constructor: ->
     @style = new AnsiStyle()
     @span = new AnsiSpan()
@@ -81,6 +94,6 @@ class AnsiStyle
 class AnsiSpan
   create: (text, style) ->
     span = document.createElement('span')
-    span.innerHTML = text
+    span.textContent = text
     span.className = style.toClass()
     span

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ansi_stream
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Guillaume Malette
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-06 00:00:00.000000000 Z
+date: 2015-05-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler