gollum-lib 5.2.1 → 5.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6398b9ab2c4d261d508568987b550e098b7414d5ece46e43d29c7ff5216b8416
-  data.tar.gz: a401118da3e76e09a28d436059d1ee9ed81fe145c74af6130c4a41c9fbad26d8
+  metadata.gz: 39710261c63c5c6a12402b640c5fb71a5c302c18f39df575e2127b5eebb67be3
+  data.tar.gz: 8f7f128aeeb398dc199130c2f0dad1e5006d9fedf59c772225a41f1287c65552
 SHA512:
-  metadata.gz: 2bf473deb11ddc079aa07dcb3a33d986315a9d7661fe80cf91637e597a352dc874918928f583c5281ec8ee974bef3fb220ca9f6ff1817d7333b521811b34df96
-  data.tar.gz: 1e6792a5b81d68cf434994e631fe97d5926f606d72fcab789103b5d87e6a931bb1ac9948ef305c6549fe6cd5fddd76f2f1a87c3fc8807dfaec684f27b964a408
+  metadata.gz: 3618878e7eabe6955e9fa83e968dac8087b9990ba5566f263c4d89dbd2d0b44689fe8abc145aa6286c654e531d6df2ee6b6d984f3c738663bb58ab19e75a3047
+  data.tar.gz: 4c34de87bd2b06d653c0e2dfea5bd013602c2c6b24e95611eff479e848ba389ef501c9bd44e860ea7b1c06cd262dbe974e132f85b86e742eb23e1d316d5433df

data/HISTORY.md

@@ -1,3 +1,8 @@
+# 5.2.1 / 2022-09-13
+
+* Fixed: 'controls' attribute in audio and video tags should not be sanitized. #430 (@dometto)
+
+
 # 5.2 / 2022-05-28
 
 * Conditionally render "editable" heading classes. Resolves https://github.com/gollum/gollum/issues/1785 (@benjaminwil)

data/Rakefile

@@ -126,7 +126,7 @@ task :release => :build do
   Rake::Task[:changelog].execute
   sh "git commit --allow-empty -a -m 'Release #{version}'"
   sh "git pull --rebase origin master"
-  sh "git tag v#{version}"
+  sh "git tag -n v#{version}"
   sh "git push origin master"
   sh "git push origin v#{version}"
   sh "gem push pkg/#{name}-#{version}.gem"

data/lib/gollum-lib/macro/audio.rb

@@ -2,7 +2,7 @@ module Gollum
   class Macro
     class Audio < Gollum::Macro
       def render (fname)
-        "<audio width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"\"> HTML5 audio is not supported on this Browser.</audio>"
+        "<audio width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"true\"> HTML5 audio is not supported on this Browser.</audio>"
       end
     end
   end

data/lib/gollum-lib/macro/video.rb

@@ -2,7 +2,7 @@ module Gollum
   class Macro
     class Video < Gollum::Macro
       def render (fname)
-        "<video width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"\"> HTML5 video is not supported on this Browser.</video>"
+        "<video width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"true\"> HTML5 video is not supported on this Browser.</video>"
       end
     end
   end

data/lib/gollum-lib/markup.rb

@@ -23,7 +23,7 @@ module Gollum
     class << self
 
       def to_xml_opts
-        { :save_with => Nokogiri::XML::Node::SaveOptions::DEFAULT_XHTML ^ 1, :indent => 0, :encoding => 'UTF-8' }
+        { :save_with => Nokogiri::XML::Node::SaveOptions::DEFAULT_XHTML & (~Nokogiri::XML::Node::SaveOptions::FORMAT), :indent => 0, :encoding => 'UTF-8' }
       end
 
       # Only use the formats that are specified in config.rb

data/lib/gollum-lib/sanitization.rb

@@ -1,4 +1,5 @@
 ::Loofah::HTML5::SafeList::ACCEPTABLE_PROTOCOLS.add('apt')
+::Loofah::HTML5::SafeList::ALLOWED_ATTRIBUTES.add('controls')
 
 module Gollum
   class Sanitization

data/lib/gollum-lib/version.rb

@@ -1,5 +1,5 @@
 module Gollum
   module Lib
-    VERSION = '5.2.1'
+    VERSION = '5.2.2'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gollum-lib
 version: !ruby/object:Gem::Version
-  version: 5.2.1
+  version: 5.2.2
 platform: ruby
 authors:
 - Tom Preston-Werner
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-09-13 00:00:00.000000000 Z
+date: 2023-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gollum-rugged_adapter
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.3
+rubygems_version: 3.2.32
 signing_key:
 specification_version: 4
 summary: A simple, Git-powered wiki.