gemirro 0.14.0 → 0.15.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7f8ed49cdaf7a3dfa867d33877665b815796ae10
-  data.tar.gz: d9b9ccee8d9155442d3ddf07ab83b9621ef14dc7
+  metadata.gz: 9f716a33048fb00a9dc0badbbeef4032ac994612
+  data.tar.gz: 9ac8e472c3d86842d594808cec512f5017ee0a75
 SHA512:
-  metadata.gz: 547800218f3511b9f1b393422ce532fe5966863e23362e44e427432bd7c423d62ed5325b284b65e422bb9cae8decd94339402e3d0c929787ac9425a27f359463
-  data.tar.gz: 338b016ee577548cf9db4ea6b8afdf431dfeb17c9c6a8afa7e49d8fbe19a19f404d2f7cb5ef31a9ca334541f168b3f8f61a9224593eb4ed045cf526d8381b10e
+  metadata.gz: e2098a84b24c3680f81e1094ad58d6590d353528c1a29a29a4f3b8754c0aaa8c8d9a325a01a14c5dd6ee4fb6641db3e5be6b3cc8f37757841512bb5c8aecd8a3
+  data.tar.gz: 6fc381c4e269aca6648d2ba0199ef604c519ed0c852e127e9efe927ab9de16866e2fb0e1cd871298c3602ad4174bf0aba5eeae85121ddf475e222070df89a51f

data/gemirro.gemspec

@@ -19,6 +19,7 @@ Gem::Specification.new do |s|
 
   s.add_dependency 'builder', '~>3.2'
   s.add_dependency 'confstruct', '~>1.0'
+  s.add_dependency 'erubis', '~>2.7'
   s.add_dependency 'httpclient', '~>2.8'
   s.add_dependency 'parallel', '~>1.12'
   s.add_dependency 'sinatra', '~>2.0'

data/lib/gemirro/server.rb

@@ -261,6 +261,16 @@ module Gemirro
           Marshal.load(::Gem.inflate(uz_file.read))
         end
       end
+
+      ##
+      # Escape string
+      #
+      # @param [String] string
+      # @return [String]
+      #
+      def escape(string)
+        Rack::Utils.escape_html(string)
+      end
     end
   end
 end

data/lib/gemirro/version.rb

@@ -1,4 +1,4 @@
 # Gemirro Version
 module Gemirro
-  VERSION = '0.14.0'.freeze
+  VERSION = '0.15.0'.freeze
 end

data/views/gem.erb

@@ -10,19 +10,19 @@
       <div class="panel panel-info">
         <div class="panel-heading">
           <a href="<%= url("gem/#{name}") %>">
-            <h2 class="panel-title"><%= name %> <span class="badge pull-right"><%= versions.newest.number %></span></h2>
+            <h2 class="panel-title"><%= escape(name) %> <span class="badge pull-right"><%= escape(versions.newest.number) %></span></h2>
           </a>
         </div>
         <div class="panel-body">
           <% newest_gem = versions.newest %>
           <% if spec = spec_for(name, newest_gem.number, newest_gem.platform) %>
-            <p><%= spec.description %></p>
+            <p><%= escape(spec.description) %></p>
 
             <h3>Dependencies</h3>
             <ul class="list-group">
               <% spec.dependencies.each do |dependency| %>
                 <li class="list-group-item">
-                  <a href="<%= url("gem/#{dependency.name}") %>"><%= [dependency.name, dependency.requirement].join(' ') %></a>
+                  <a href="<%= url("gem/#{dependency.name}") %>"><%= escape([dependency.name, dependency.requirement].join(' ')) %></a>
                 </li>
               <% end %>
             </ul>
@@ -31,7 +31,7 @@
             <ul class="list-group">
               <% spec.authors.each do |author| %>
                 <li class="list-group-item">
-                  <a href="<%= spec.homepage %>"><%= author %></a>
+                  <a href="<%= escape(spec.homepage) %>"><%= escape(author) %></a>
                 </li>
               <% end %>
             </ul>
@@ -42,9 +42,9 @@
           <% versions.each.reverse_each do |version| %>
             <li class="list-group-item clearfix">
               <p class="pull-left">
-                <code>gem install <%= version.name %> -v "<%= version.number %>"</code>
+                <code>gem install <%= escape(version.name) %> -v "<%= escape(version.number) %>"</code>
                 <% unless version.platform =~ /^ruby/i %>
-                  <small class="platform"><%= version.platform %></small>
+                  <small class="platform"><%= escape(version.platform) %></small>
                 <% end %>
               </p>
               <div class="pull-right">

data/views/index.erb

@@ -12,21 +12,21 @@
         <div class="panel panel-info">
           <div class="panel-heading">
             <a href="<%= url("gem/#{name}") %>">
-              <h2 class="panel-title"><%= name %> <span class="badge pull-right"><%= versions.newest.number %></span></h2>
+              <h2 class="panel-title"><%= escape(name) %> <span class="badge pull-right"><%= escape(versions.newest.number) %></span></h2>
             </a>
           </div>
 
           <div class="panel-body">
             <% spec = spec_for(name, versions.newest.number) %>
             <% if spec.is_a?(::Gem::Specification) %>
-              <%= spec.description %>
+              <%= escape(spec.description) %>
             <% end %>
 
             <% versions.reverse_each.first(5).each do |version| %>
               <p>
-                <code>gem install <%= version.name %> <%= "--prerelease" if version.number.to_s.match(/[a-z]/i) %> -v "<%= version.number %>"</code>
+                <code>gem install <%= escape(version.name) %> <%= "--prerelease" if version.number.to_s.match(/[a-z]/i) %> -v "<%= escape(version.number) %>"</code>
                 <% unless version.platform =~ /^ruby/i %>
-                  <small class="platform"><%= version.platform %></small>
+                  <small class="platform"><%= escape(version.platform) %></small>
                 <% end %>
               </p>
             <% end %>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gemirro
 version: !ruby/object:Gem::Version
-  version: 0.14.0
+  version: 0.15.0
 platform: ruby
 authors:
 - Pierre Rambaud
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-10-23 00:00:00.000000000 Z
+date: 2017-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: builder
@@ -38,6 +38,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: erubis
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
 - !ruby/object:Gem::Dependency
   name: httpclient
   requirement: !ruby/object:Gem::Requirement
@@ -289,7 +303,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.13
+rubygems_version: 2.6.11
 signing_key: 
 specification_version: 4
 summary: Gem for easily creating your own gems mirror.