aris 1.5.0 → 1.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 547d34f5d148e75eec825310ab4da2bd6e80b02710386b7655210f4d5291804b
-  data.tar.gz: 41c84020f283351be32ff5b23444a4cc667e1034aec4f631efa586684c5f6833
+  metadata.gz: 177c81e9724b54870daf6b964a57dd9fd3266c7aba9a33e6e2ad86739a03abfa
+  data.tar.gz: f3cb1744bd6822871889d9e8e8d3b59c3e26dd02409bd9de5f6e8824cb4a6760
 SHA512:
-  metadata.gz: e34a068d4a4cd75e4694686896c1a8596da07b55abb4c7dff4cae3ead8e1d62d7871c76dbdbdeed21be8a7a44b7f39f883dae9dadd129c76b9b1f5ad743ac753
-  data.tar.gz: 591b1a14fb433f46da7907ade3167dee46dcee2fca40e6187a1bc748c7be3dd02ca9e93a9a6bc30393e5a35e37584eb8ba6519ebc7cc01cd7313c3237990767d
+  metadata.gz: ebd7ca4a073b9d073c192ce21bc84aaf831257968bb1f5f22c93a7eff45f6e57bc487944596aa7ad4881abe61a56db73b8fae4d5935455e102a4dce1804c0eab
+  data.tar.gz: 9ab6127bf992f2341bf827f063ad013795ecae774264207afdc3421d08c703daa56c644e1596dbd74d09dde18b78c0a6d61c4d6a38cf840fe43fb549dc4f9b89

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [1.5.1] - 2026-09-13
+
+Text is text. Suite: 426 tests / 1294 assertions, green.
+
+### 🐛 Fixed
+
+* **Path params and multipart fields came out as raw bytes (ASCII-8BIT).** Servers hand `PATH_INFO` and the request body over as binary strings, and aris passed them straight through. That is invisible until something cares about encoding: the `sqlite3` gem binds a binary string as a BLOB, so `WHERE book = ?` with a route param never matched, and a form value saved through a multipart form landed in the database as a BLOB instead of TEXT. Route params (`params[:book]`) and multipart field values, names and filenames are now UTF-8 text (invalid bytes are scrubbed). File data stays binary. Urlencoded forms were already fine (Rack decodes them as UTF-8).
+
 ## [1.5.0] - 2026-09-12
 
 Sessions you can build a login on, and Rack 3 correct responses. Suite: 424 tests / 1289 assertions, green.

data/lib/aris/plugins/multipart.rb

@@ -151,11 +151,13 @@ module Aris
           content_type_match = headers_raw.match(/content-type:\s*(.+?)(?:\r?\n|$)/i)
           content_type = content_type_match ? content_type_match[1].strip : nil
           
+          # The body is raw bytes; names, filenames and text fields are text.
+          # A file's data stays binary.
           if filename
             # File upload
             parts << {
-              name: name,
-              filename: filename,
+              name: text(name),
+              filename: text(filename),
               content_type: content_type || 'application/octet-stream',
               data: content,
               type: :file
@@ -163,8 +165,8 @@ module Aris
           else
             # Regular form field
             parts << {
-              name: name,
-              data: content,
+              name: text(name),
+              data: text(content),
               type: :field
             }
           end
@@ -172,6 +174,12 @@ module Aris
         
         parts
       end
+
+      def text(str)
+        return str if str.nil? || str.encoding == Encoding::UTF_8
+        out = str.dup.force_encoding(Encoding::UTF_8)
+        out.valid_encoding? ? out : out.scrub
+      end
     end
   end
 end

data/lib/aris/router.rb

@@ -696,6 +696,13 @@ module Aris
         path.length > 1 && path.end_with?('/') ? path.chomp('/') : path
       end
       
+      # Servers hand PATH_INFO over as raw bytes (ASCII-8BIT). Path params must be
+      # text: a binary "coop" is a BLOB to SQLite and never equals the text 'coop'.
+      unless normalized.encoding == Encoding::UTF_8
+        normalized = normalized.dup.force_encoding(Encoding::UTF_8)
+        normalized = normalized.scrub unless normalized.valid_encoding?
+      end
+
       if normalized.include?('%')
         begin
           normalized = URI.decode_www_form_component(normalized)

data/lib/aris/version.rb

@@ -1,3 +1,3 @@
 module Aris
-  VERSION = "1.5.0"
+  VERSION = "1.5.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aris
 version: !ruby/object:Gem::Version
-  version: 1.5.0
+  version: 1.5.1
 platform: ruby
 authors:
 - Steven Garcia