devcenter-parser 2.1.0 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4d95a94b7c9105e23060c78ab4615837110ed790
-  data.tar.gz: 388710bb2e60085a1585deec9aaf2d0b91ab3a90
+  metadata.gz: 7b7904e3c95fe0196c46de26736acdcd7d287b52
+  data.tar.gz: 606a60a9d43809dcd1e8a5065f0dae064936bef8
 SHA512:
-  metadata.gz: afa310e5adb4c2f160a0196144a8588d6a8c284e8e6115bdba8e9844e761fcdfa7aae4e9438f3a4a518872573b715a80f394dc21576bc1e5483a73678d16f35d
-  data.tar.gz: 2918139f9658bff3f9ec1746405f70eef5e3681a9e07c7243fafac67126961446a45cc60efc04efe05a2d8807944805c0150fadca772bd5bc9bca796d67c1f7f
+  metadata.gz: 25c925522b066e92afcb13dd94dd193a0769b00951fcfff2ab1474ca127d16ded975447d6b1cd1b7e15102daf730b044c1c9fc396214189e03532369b695ac3a
+  data.tar.gz: 305986ed593c48b4db316bfcf93b0b9e1aa59d1bf4c5b869dc7316a5ecad35bd02513bc105edae3d5d969b3a16a3e28cd22e22e4bef05acaeede7baf8edcaa1c

data/lib/devcenter-parser.rb

@@ -115,7 +115,7 @@ module DevcenterParser
   def self.iframe_sanitizer
     lambda do |env|
       return unless env[:node].attributes['src']
-      env[:node].unlink if env[:node].attributes['src'].value =~ /\Ajavascript:/
+      env[:node].unlink if env[:node].attributes['src'].value =~ /\Ajavascript:/i
     end
   end
 end

data/lib/devcenter-parser/version.rb

@@ -1,3 +1,3 @@
 module DevcenterParser
-  VERSION = '2.1.0'
+  VERSION = '2.1.1'
 end

data/test/devcenter-parser_test.rb

@@ -430,6 +430,16 @@ HTML
 
       assert_parsing_result md, "<p></p>"
     end
+
+
+    it 'removes elements with src="jaVasCript:"' do
+      md = <<-MARKDOWN
+<iframe src="jaVasCript:">alert("foo");</iframe>
+<img src="jaVasCript:" />
+      MARKDOWN
+
+      assert_parsing_result md, "<p></p>"
+    end
   end
 
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devcenter-parser
 version: !ruby/object:Gem::Version
-  version: 2.1.0
+  version: 2.1.1
 platform: ruby
 authors:
 - Heroku
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-06-02 00:00:00.000000000 Z
+date: 2016-06-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri