flagpole_sitta 0.9.4 → 0.9.5

data/app/helpers/flagpole_sitta_helper.rb

@@ -8,6 +8,29 @@ module FlagpoleSittaHelper
     model.try(:update_array_cache, key, :route_id => route_id)
   end
 
+  #In case an unsafe param gets passed. 
+  #Don't want to save SQL injection attempts in the cache.
+  def clean_options options={}
+
+    result = Hash.new
+
+    options.each do |k,v|
+      #If it fails its not a string and it doesn't need to be 
+      #sanitized anyway.
+      begin
+        clean_v = sanitize(v)
+      rescue
+        clean_v = v
+      end
+
+      result[k] = clean_v
+
+    end
+
+    result
+
+  end
+
   ##
   #AR - cache_sitta helper
   #NOTE This is not safe for .builder xml files.
@@ -64,6 +87,8 @@ module FlagpoleSittaHelper
   #and while it boils down to a call by id, they can still add up if you don't pay attention.
   def cache_sitta  options={}, &block
 
+    options = clean_options(options)
+
     if options[:route_id].class.eql?(Array)
       main_route_id = options[:route_id][0]
     else
@@ -78,10 +103,6 @@ module FlagpoleSittaHelper
         main_model = options[:model]
       end
 
-    elsif params[:model]
-
-      main_model = params[:model]
-
     elsif options[:models_in_index]
 
       if options[:models_in_index].class.eql?(Array)

data/lib/flagpole_sitta/cache_sitta.rb

@@ -94,7 +94,7 @@ module FlagpoleSitta
         flag_key = array_cache_key_gen "Flag", options[:route_id]
         FlagpoleSitta::CommonFs.flagpole_cache_write(flag_key, flag)
 
-        key
+        array_key
 
       end
 

data/lib/flagpole_sitta/version.rb

@@ -1,3 +1,3 @@
 module FlagpoleSitta
-  VERSION = "0.9.4"
+  VERSION = "0.9.5"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: flagpole_sitta
 version: !ruby/object:Gem::Version 
-  hash: 51
+  hash: 49
   prerelease: 
   segments: 
   - 0
   - 9
-  - 4
-  version: 0.9.4
+  - 5
+  version: 0.9.5
 platform: ruby
 authors: 
 - Andrew Rove (Rover)
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-08-28 00:00:00 Z
+date: 2012-09-19 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: dalli