comfortable_mexican_sofa 1.10.2 → 1.10.3

data/README.md

@@ -81,3 +81,7 @@ Twitter: [@GroceryBagHead](http://twitter.com/#!/GroceryBagHead)
 ComfortableMexicanSofa is released under the [MIT license](https://github.com/comfy/comfortable-mexican-sofa/raw/master/LICENSE) 
 
 Copyright 2009-2013 Oleg Khabarov, [The Working Group Inc](http://www.twg.ca)
+
+
+[![Bitdeli Badge](https://d2weczhvl823v0.cloudfront.net/comfy/comfortable-mexican-sofa/trend.png)](https://bitdeli.com/free "Bitdeli Badge")
+

data/lib/comfortable_mexican_sofa/version.rb

@@ -1,3 +1,3 @@
 module ComfortableMexicanSofa
-  VERSION = "1.10.2"
+  VERSION = "1.10.3"
 end

data/lib/comfortable_mexican_sofa/view_methods.rb

@@ -35,7 +35,7 @@ module ComfortableMexicanSofa::ViewMethods
     end
     
     return '' unless snippet
-    render :inline => ComfortableMexicanSofa::Tag.process_content(cms_site.pages.build, snippet.content)
+    render :inline => ComfortableMexicanSofa::Tag.process_content(cms_site.pages.build, ComfortableMexicanSofa::Tag.sanitize_irb(snippet.content))
   end
 
   # Content of a text based page block. This is the typical method for retrieving content from
@@ -79,7 +79,7 @@ module ComfortableMexicanSofa::ViewMethods
     when ComfortableMexicanSofa::Tag::PageFiles
       block.files
     else
-      render :inline => ComfortableMexicanSofa::Tag.process_content(page, block.content)
+      render :inline => ComfortableMexicanSofa::Tag.process_content(page, ComfortableMexicanSofa::Tag.sanitize_irb(block.content))
     end
   end
 end

data/test/lib/view_methods_test.rb

@@ -110,7 +110,13 @@ class ViewMethodsTest < ActionView::TestCase
     assert_equal 'default_snippet_content',
       action_result('test_cms_snippet_with_default_content_block')
   end
-  
+
+  def test_cms_snippet_content_with_irb
+    cms_snippets(:default).update_column(:content, '<%= 1+1+1+1+1 %>')
+    assert_equal "&lt;%= 1+1+1+1+1 %&gt;", action_result('test_cms_snippet_content')
+  end
+
+
   def test_cms_page_content
     assert_equal 'default_field_text_content', action_result('test_cms_page_content')
   end
@@ -141,4 +147,9 @@ class ViewMethodsTest < ActionView::TestCase
     assert_equal page.blocks.find_by_identifier('files').files, cms_page_content(:files, page)
   end
 
+  def test_cms_page_content_with_irb
+    cms_blocks(:default_field_text).update_column(:content, '<%= 1+1+1+1+1 %>')
+    assert_equal "&lt;%= 1+1+1+1+1 %&gt;", action_result('test_cms_page_content')
+  end
+
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: comfortable_mexican_sofa
 version: !ruby/object:Gem::Version
-  version: 1.10.2
+  version: 1.10.3
   prerelease: 
 platform: ruby
 authors: