clean_room 0.0.1 → 0.0.2

data/clean_room.gemspec

@@ -13,5 +13,8 @@ Gem::Specification.new do |gem|
   gem.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
   gem.name          = "clean_room"
   gem.require_paths = ["lib"]
+
+  gem.add_runtime_dependency "activesupport", ">= 3.0.0"
+
   gem.version       = CleanRoom::VERSION
 end

data/lib/clean_room/version.rb

@@ -1,3 +1,3 @@
 module CleanRoom
-  VERSION = "0.0.1"
+  VERSION = "0.0.2"
 end

data/lib/clean_room.rb

@@ -1,5 +1,83 @@
+require "active_support"
+
 require "clean_room/version"
 
 module CleanRoom
-  # Your code goes here...
+  module DSL
+    extend ActiveSupport::Concern
+
+    included do
+      self.sanitizable_attributes = {}
+
+      if respond_to? :before_save
+        before_save :sanitize_attributes
+      end
+    end
+
+    def sanitize_attributes
+      self.class.sanitizable_attributes.each do |name, options|
+        sanitize_attribute name, options
+      end
+    end
+
+    def sanitize_attribute(name, options = {})
+      current_value = self.send(name)
+      cleaned_value = air_lock.shower(current_value, options)
+
+      raise Exceptions::Contaminated.new("#{name} contained unacceptable data") if options[:raise] && (current_value != cleaned_value)
+      self.send("#{name}=".to_sym, cleaned_value)
+    end
+
+    def air_lock
+      @air_lock ||= AirLock.new
+    end
+
+    module ClassMethods
+      attr_accessor :sanitizable_attributes
+
+      def sanitize_attribute(name, options = {})
+        name = name.to_sym
+        if instance_methods.include?(name) && instance_methods.include?("#{name}=".to_sym)
+          sanitizable_attributes[name] = options
+        else
+          raise Exceptions::InvalidAttribute.new("#{self.class} does not respond to '#{name}(=)'")
+        end
+      end
+    end
+  end
+
+  module Exceptions
+    class Contaminated < StandardError
+    end
+    class InvalidAttribute < StandardError
+    end
+  end
+
+  class AirLock
+
+    def shower(value, options)
+      if value
+        allow = options[:allow] || :plain_text
+
+        cleaned_value = case allow
+        when :html
+
+        when :simple_html
+
+        else
+          value.gsub(/[^a-zA-Z0-9 ]/, "")
+        end
+      else
+        nil
+      end
+    end      
+
+    def sanitize(text)
+      #sanitizer.sanitize(text)
+    end
+
+    def sanitizer
+      #@sanitizer ||= HTML::WhiteListSanitizer.new
+    end
+  end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: clean_room
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
   prerelease: 
 platform: ruby
 authors:
@@ -10,7 +10,18 @@ autorequire:
 bindir: bin
 cert_chain: []
 date: 2012-06-19 00:00:00.000000000 Z
-dependencies: []
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: &70341193917880 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *70341193917880
 description: Work in progress, this will be a generic attribute sanitizer which can
   be used for sanitizing models and other objects holding data
 email: