form_core 0.0.7 → 0.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b3e28335f9bf0c7a5d293b97d448027a71215c21
-  data.tar.gz: e0b5945d3f212907ebaf2a63c53001a84099ce6d
+  metadata.gz: 5779e04e58d6b9ac5ac2ee67774981334045979c
+  data.tar.gz: a14c6f980431da776467bf80c7b02d437de365ba
 SHA512:
-  metadata.gz: fd4f464c62523e97e1c102a3b3a5ae487acfd526f9d16b5cd946a6b564bff9a346131f73ac0ca2407677d7d3189512a8d1bee009740acc44c0460085dd12bb82
-  data.tar.gz: 458695a18aa20db4d5e0e992183d5ff6ec67f357bea7988646cecdfe23315224a1384664f82784b999e64194cf468577cb009edc752a16c3a481c34277970e3b
+  metadata.gz: 5c79e9b062200bd198812b6c33c3d7280d4ad334322ca26d59514b782e97e7bdec94a17e153ca31cd9ea95cd23447928fa7ff59405274d56d06cfd7957764be3
+  data.tar.gz: 6e72e1414d78d00330999c7976b29ff307a7149327b0efb887a276b8093abf2793d99637f83d3627598f81a9972826672ac511afcd492716d798b25e9f9a3d98

data/lib/form_core/coder.rb

@@ -2,15 +2,16 @@
 
 module FormCore
   class Coder
+    cattr_accessor :strict
+
     attr_reader :object_class
 
-    def initialize(object_class, strict: false)
+    def initialize(object_class)
       @object_class = object_class
-      @strict = strict
     end
 
     def strict?
-      @strict
+      Coder.strict
     end
 
     def dump(_obj)

data/lib/form_core/coders/yaml_coder.rb

@@ -4,6 +4,16 @@ require "yaml"
 
 module FormCore
   class YAMLCoder < FormCore::Coder # :nodoc:
+    cattr_accessor :safe_mode
+
+    def self.whitelist_classes
+      @whitelist_classes ||= []
+    end
+
+    def safe_mode?
+      YAMLCoder.safe_mode
+    end
+
     def dump(obj)
       return YAML.dump({}) unless obj
 
@@ -17,7 +27,12 @@ module FormCore
         return new_or_raise_decoding_error
       end
 
-      decoded = YAML.load(yaml)
+      decoded =
+        if safe_mode?
+          YAML.safe_load(yaml, YAMLCoder.whitelist_classes)
+        else
+          YAML.load(yaml)
+        end
       unless decoded.is_a? Hash
         return new_or_raise_decoding_error
       end

data/lib/form_core/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module FormCore
-  VERSION = "0.0.7"
+  VERSION = "0.0.8"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: form_core
 version: !ruby/object:Gem::Version
-  version: 0.0.7
+  version: 0.0.8
 platform: ruby
 authors:
 - jasl
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-10-04 00:00:00.000000000 Z
+date: 2017-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails