bit_player 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2519fc4a1fc94f6a853a5c805579fb14e90f6184
-  data.tar.gz: 1ad14c9bcf84750b0d93331819c98f3834040c48
+  metadata.gz: e1e21e39e222450b6deb3c43040e74ee125fff5d
+  data.tar.gz: caa9274f55cef000e2b711fa7138882afe724b6a
 SHA512:
-  metadata.gz: fe590279df0dcbc33aa605a89e82810f5e024438673d34d6427a95c4fae4033f3e5b452fd8bafb0bd881dff717524b93f84bc8b5529303b3791072f6d359a6c5
-  data.tar.gz: 38d4dee6e5454c535dd84282cdd5e69a1a6761bb0b9704dc93248d4d9519fc06477aba2ed8a51269d48cc92a19d6bdf480a48cd884f2ea41f2513d1e37da410a
+  metadata.gz: b232fa67a975f82361a4c4ae5e2ad1310ce82c3ae7b708d13b190675ed59c8761c939bf762e56a03e2863f01a32ab3c9d8d24bdc2813b8b08bb7bad5768dc81e
+  data.tar.gz: b00ff8f09a9cd0f07e8e8cea184ff124695738d46bddcc3fca176be8875e70e62dd59578cb171f3930b333918fb2561bea07c895cead9555adacf1f6b1ebd0e7

data/app/models/bit_player/slide.rb

@@ -15,11 +15,17 @@ module BitPlayer
       rendered = ""
 
       if !body.nil?
-        markdown = Redcarpet::Markdown.new(Redcarpet::Render::HTML, space_after_headers: true)
-        rendered += markdown.render(body).html_safe
+        markdown = Redcarpet::Markdown.new(
+          Redcarpet::Render::HTML.new(
+            filter_html: true,
+            safe_links_only: true
+          ),
+          space_after_headers: true,
+        )
+        rendered += markdown.render(body)
       end
 
-      rendered
+      rendered.html_safe
     end
 
     def self.update_positions(ids)

data/lib/bit_player/version.rb

@@ -1,3 +1,3 @@
 module BitPlayer
-  VERSION = "0.1.2"
+  VERSION = "0.1.3"
 end

data/spec/dummy/log/test.log

@@ -255,3 +255,56 @@ Migrating to CreateBitPlayerSlides (20140306000537)
    (0.2ms)  BEGIN
   BitPlayer::ContentModule Load (2.0ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
    (0.3ms)  ROLLBACK
+   (0.1ms)  BEGIN
+  BitPlayer::ContentModule Load (1.9ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+  BitPlayer::ContentModule Load (1.9ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
+   (0.3ms)  ROLLBACK
+   (0.3ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.3ms)  BEGIN
+  BitPlayer::ContentModule Load (1.8ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+  BitPlayer::ContentModule Load (1.8ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
+   (0.3ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.4ms)  ROLLBACK
+   (0.2ms)  BEGIN
+  BitPlayer::ContentModule Load (1.8ms)  SELECT "bit_player_content_modules".* FROM "bit_player_content_modules" WHERE "bit_player_content_modules"."context" = 'a' AND "bit_player_content_modules"."position" = 1 ORDER BY "bit_player_content_modules"."id" ASC LIMIT 1
+   (0.3ms)  ROLLBACK
+   (0.3ms)  BEGIN
+   (0.4ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK
+   (0.2ms)  BEGIN
+   (0.2ms)  ROLLBACK

data/spec/models/bit_player/slide_spec.rb

@@ -13,5 +13,11 @@ describe BitPlayer::Slide do
 
       expect(slide.render_body).to match(/<h1>header<\/h1>/)
     end
+
+    it "should escape html" do
+      slide.body = "<div>my content</div>"
+
+      expect(slide.render_body).to match(/<p>my content<\/p>/)
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bit_player
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Eric Carty-Fickes