go_to_param 1.1.0 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 19bbfd139f7a3c04cae82b201603264929282a8d
-  data.tar.gz: 664fd95648b290ccbdc9f5084d3ea6ed3ea54ee6
+  metadata.gz: 72eda2624e61954c9946f55d934d4901c1e96650
+  data.tar.gz: 32e6528195c767d629097d7d322c2e5e556dc2d2
 SHA512:
-  metadata.gz: fa371354b00c217ee6fa0b43d3b8d1e6b91fc2e6d2e88ac85cb7044d95ed453e59bb9f6111926fd770b15dfc676cbb1cec8c50bcc3195caccc08de41a0e5d184
-  data.tar.gz: 657fb095986d8300e54a473012fe7ff0f6d57f44255fb51c4fc18ac7e053341f216b9a26c5849739abc0903448544500aaa0323e37d8621b6592f60909ab9f85
+  metadata.gz: 98a305b56695de24207e93b4790a3f7a468e5a044ce319fc22004d0e72fda53d9e1e471d75414bb9d44259ef6aaf0da24d3fa523006746e1713e270bda0f76f9
+  data.tar.gz: 2c47057f2b829003393c1c8e0d11c529fbf4f825ef1b70f3799c8341aaeee23c22cf65d9ee15337f523b2c3c9ec6a143702ba60190f425696d1decfab8603c3a

data/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+## 1.1.1
+
+- Don't raise exceptions if given hash params from hack attempts, such as: `go_to[foo]=bar`.
+
+## Earlier
+
+Sorry, no changelog available for earlier versions.

data/lib/go_to_param.rb

@@ -75,7 +75,9 @@ module GoToParam
   end
 
   def go_to_param_value
-    params[:go_to]
+    # We use `to_s` to avoid "not a string" type errors from hack attempts where a hash is passed, e.g. "go_to[foo]=bar".
+    value = params[:go_to].to_s
+    value == "" ? nil : value
   end
 
   # Named this way to avoid conflicts. TODO: http://thepugautomatic.com/2014/02/private-api/

data/lib/go_to_param/version.rb

@@ -1,3 +1,3 @@
 module GoToParam
-  VERSION = "1.1.0"
+  VERSION = "1.1.1"
 end

data/spec/go_to_param_spec.rb

@@ -134,6 +134,11 @@ describe GoToParam do
       expect(controller.go_to_path).to be_nil
     end
 
+    it "is nil when given a hash" do
+      controller.params = { go_to: { evil: "true" }, id: "1" }
+      expect(controller.go_to_path).to be_nil
+    end
+
     it "respects custom allowed redirect prefixes" do
       GoToParam.allow_redirect_prefix("myapp://")
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: go_to_param
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Henrik N
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-12-07 00:00:00.000000000 Z
+date: 2017-12-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -60,6 +60,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
+- CHANGELOG.md
 - Gemfile
 - README.md
 - Rakefile
@@ -87,7 +88,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.2
+rubygems_version: 2.6.11
 signing_key: 
 specification_version: 4
 summary: Rails "go_to" redirection param utilities.