generic_form_builder 0.7.1 → 0.8.0

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    YjM0NWIyMWUzZDY2ODZhMjEyZWRmMmVhNTAxZTY5M2Q3ZTgyMTc3ZA==
+    N2YzMzFiMmU1MzM1ZWJjMzYyZDk5NWMxYzlhZjRjODI3MzhjYTEyOA==
   data.tar.gz: !binary |-
-    MDNkMWJkY2JjMjlhNzMyZGQ1OTEyYmQzYmE0NDRmOTgxNTFiNTY0OA==
+    YjdhMWE0YmJlYjk3YTQwNjNlZmEwYTI4MzY4MzQ4MDA3MzFiMjRmNg==
 SHA512:
   metadata.gz: !binary |-
-    M2FlMmM2YWExMzBmZDY4MTJkZmJmMjczOGRjNmRjZjRlYmMwZmM3NjkzM2Fl
-    YzIzNzUyNjc2M2I1Y2MzZmNkMDRiOWUwYzA0NDQxNTQzZTEzMjMzZWY1MDA4
-    Y2IxZjE4MjdiYmRlZWMwOWI2MzY1NWQ5OTFjNDIzZmQzZjYxZDY=
+    ZDk2Y2QzZTc2NzliNjM3NzkzOGQ0ZmRlNDJlNWM2YzJjNmQxODA3ZDFhYjE1
+    YTA3NzM2ZWQxY2Q4ZDczODg5NTI4ZTkwMjhmMzQxMTI5MjQzZWFkYjFlNGMz
+    MWZjYThkMjcwYTE1OWRjNDc0MDAzZWE1MGIxOWQ2OTZhOGQ1OWE=
   data.tar.gz: !binary |-
-    NzgzZDUyMzY0MzI3YTRkZmViYmE2MmU4NjU0ZGJjMmRkMjA5MmM0MWY3Zjhl
-    ZmM3NGRmODliNWRlY2JkMTQzYjRmMGY5ZGIyZTM2ZDljNzBhNjBkYWZjYTdj
-    YmNkZTFkYmRmMjk3ZjY4NWM0ODBiOTdjYjY2ZWI5ZTEwY2E0ZmU=
+    ZWIzN2VkMDc1MTlhZTQ5M2FlZTE0MTFjOTBlOTlmMjg5NDczNzBiODhhYzYw
+    NjhkNTZhODUwZjdjYTBjNjZiZjgzMzAwZGY0OTEzN2ZiNzY2MWExNzJiODVm
+    NGRmYmRiMTE1OGM3Y2FlZjgyOWVkY2M1YThjYTcxZWQxZTg3OTc=

data/README.md

@@ -12,3 +12,9 @@ This is a "generic" form builder because it covers most cases and is a starting
 
 If there's something missing that you think might be relevant to the wider world by all means put in a pull request,
 otherwise subclass the generic builder with your own domain specific additions.
+
+## XSS WARNING
+
+In order to facilitate fancier notes and inline errors, all output from these helpers are considered HTML safe and will not be escaped.
+
+DO NOT send any user input of any kind into the extra options (`note`, `label` etc) or you will be at risk of various attacks.

data/generic_form_builder.gemspec

@@ -1,7 +1,7 @@
 # -*- encoding: utf-8 -*-
 Gem::Specification.new do |s|
   s.name          = "generic_form_builder"
-  s.version       = '0.7.1'
+  s.version       = '0.8.0'
   s.platform      = Gem::Platform::RUBY
   s.authors       = ["Elliot Crosby-McCullough", "George Brocklehurst", "Elise Huard", "Tom Stuart"]
   s.email         = ["elliot.cm@gmail.com"]

data/lib/generic_form_builder.rb

@@ -19,11 +19,11 @@ class GenericFormBuilder < ActionView::Helpers::FormBuilder
       html_options = {}
 
       if any_errors?(field)
-        errors = ' '+errors_text(field)
+        errors = ' '+content_tag(:span, errors_text(field), :class => "error")
         html_options.merge!('class' => 'errors')
       end
 
-      content_tag(:p, label(field, "#{options[:label] || field.to_s.humanize}#{errors}") + note + super(field, options, *args) + button.try(:html_safe), html_options)
+      content_tag(:p, label(field, "#{options[:label] || field.to_s.humanize}#{errors}".try(:html_safe)) + note + super(field, options, *args) + button.try(:html_safe), html_options)
     end
   end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: generic_form_builder
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.8.0
 platform: ruby
 authors:
 - Elliot Crosby-McCullough
@@ -11,7 +11,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-02-14 00:00:00.000000000 Z
+date: 2014-02-19 00:00:00.000000000 Z
 dependencies: []
 description: 
 email: