dm_core 4.2.3.5 → 4.2.3.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0490f46401026caee491bca39285f601fd19beca
-  data.tar.gz: 02bcbb988dbb7981aa90514fcb96f68aa5422561
+  metadata.gz: ac89f31f284e74d5e6aac7acb6ea93b07215272a
+  data.tar.gz: fda380a2a51a1799b585bcb350bc56f946d2ea7e
 SHA512:
-  metadata.gz: 54ad5aed91b6bfa8b7bb4286eb6758ff8b7da0b5c92e81ec3232252a4f29845433c86a43baa032173f82cdac605d4fe1705b7daeaf7214aad35e8a90b54d500b
-  data.tar.gz: dcc180704d792810d0c430aca89b0e05fde8b34b1f3cc1546afc5ed489ec773f2aa060d70bef2754035c489c0b8d7d20756f4ec39679b52a9bbf97136e3061f4
+  metadata.gz: 754a71d30e5620791e1d59eb9e0c84fd745fd64fff018f7eff3e07a72749aaf5d635491cca9f62cbb92675844fa1d0ed43af47785e8d3baedbe7a4a32e263b13
+  data.tar.gz: 0c4121ebf9a9aaa375b58033d2ba0dd9fcc4252b31d295e4d5018629bcf4fa7877177bc306545d296c4d56279ae2bba8d366ef8954ae4953f3d03d9fe198f096

data/app/helpers/dm_core/liquid_helper.rb

@@ -47,7 +47,8 @@ module DmCore::LiquidHelper
     else
       html = ::Kramdown::Document.new(content).to_html.html_safe
     end
-    return options[:safe] ? sanitize_text(html, level: :relaxed).html_safe : html
+    # for safety, use :basic or lower
+    return options[:safe] ? sanitize_text(html, level: :basic).html_safe : html
   end
   
   # Uses Sanitize gem to fully sanitize any text.  
@@ -63,7 +64,7 @@ module DmCore::LiquidHelper
       # Allows only very simple inline formatting markup. No links, images, or block elements.
       Sanitize.clean(content, Sanitize::Config::RESTRICTED)
     when :basic
-      #Allows a variety of markup including formatting tags, links, and lists. 
+      # Allows a variety of markup including formatting tags, links, and lists. 
       # Images and tables are not allowed, links are limited to FTP, HTTP, HTTPS, and 
       # mailto protocols, and a rel="nofollow" attribute is added to all links to
       # mitigate SEO spam.

data/app/models/comment.rb

@@ -19,6 +19,7 @@ class Comment < ActiveRecord::Base
   belongs_to        :account
   
   validates_presence_of   :body
+  validates_length_of     :body, maximum: 60000
   self.per_page = 10
 
 end

data/app/models/custom_field.rb

@@ -38,6 +38,7 @@ class CustomField < ActiveRecord::Base
 
   validates_presence_of         :field_data, if: Proc.new {|field| field.required?}
   validates_numericality_of     :field_data, if: Proc.new {|field| field.field_type == 'number_field' && !field.field_data.blank?}
+  validates_length_of           :field_data, maximum: 4096, if: Proc.new {|field| !field.field_data.blank?}
   validate                      :checkbox_required, if: Proc.new {|field| field.field_type == 'check_box_collection' && field.required?}
 
   #------------------------------------------------------------------------------

data/lib/dm_core/version.rb

@@ -1,3 +1,3 @@
 module DmCore
-  VERSION = "4.2.3.5"
+  VERSION = "4.2.3.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dm_core
 version: !ruby/object:Gem::Version
-  version: 4.2.3.5
+  version: 4.2.3.6
 platform: ruby
 authors:
 - Brett Walker
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-01-16 00:00:00.000000000 Z
+date: 2017-01-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails