gollum-lib 5.2.1-java → 5.2.2-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c8eb75e8cec808b1e8ffe26b5ec999792bdce7a15af24cbdac9117100df5d268
-  data.tar.gz: 4d4f7d6e12db10532a52860404c2466720ea6e9916b6ede7dfa5bc4edad40673
+  metadata.gz: b143e2df33dc9dc9b02d92e03157ffb7e95a04e2ee642e4fc96d504252fc8666
+  data.tar.gz: 8f7f128aeeb398dc199130c2f0dad1e5006d9fedf59c772225a41f1287c65552
 SHA512:
-  metadata.gz: eb91d755311d03fa94a5062553ae9d8b32672d49632c71699118c9ae5647099e7c7c0b2a30bf3b1912ab99e0a6c42973faf443ee33409105de07a2b613f18edf
-  data.tar.gz: 4d35c9fff4acf001d76377ffadc1fa26a07ec7e31643a47cd12b6c2c5ce59057db5ac148e57025e72a056dc7b7be499d6414faa14d8ba8c655cada43f4c3f737
+  metadata.gz: cf52a1dcfc52a2fc8aaf20b3234920e017decc049a5ca1af3a3990771191a4389655d8ac3e0a3e424f8a6a427b214a527cffba399eb479b6a2633e7fe81488d3
+  data.tar.gz: 4c34de87bd2b06d653c0e2dfea5bd013602c2c6b24e95611eff479e848ba389ef501c9bd44e860ea7b1c06cd262dbe974e132f85b86e742eb23e1d316d5433df

data/HISTORY.md

@@ -1,3 +1,8 @@
+# 5.2.1 / 2022-09-13
+
+* Fixed: 'controls' attribute in audio and video tags should not be sanitized. #430 (@dometto)
+
+
 # 5.2 / 2022-05-28
 
 * Conditionally render "editable" heading classes. Resolves https://github.com/gollum/gollum/issues/1785 (@benjaminwil)

data/Rakefile

@@ -126,7 +126,7 @@ task :release => :build do
   Rake::Task[:changelog].execute
   sh "git commit --allow-empty -a -m 'Release #{version}'"
   sh "git pull --rebase origin master"
-  sh "git tag v#{version}"
+  sh "git tag -n v#{version}"
   sh "git push origin master"
   sh "git push origin v#{version}"
   sh "gem push pkg/#{name}-#{version}.gem"

data/lib/gollum-lib/macro/audio.rb

@@ -2,7 +2,7 @@ module Gollum
   class Macro
     class Audio < Gollum::Macro
       def render (fname)
-        "<audio width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"\"> HTML5 audio is not supported on this Browser.</audio>"
+        "<audio width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"true\"> HTML5 audio is not supported on this Browser.</audio>"
       end
     end
   end

data/lib/gollum-lib/macro/video.rb

@@ -2,7 +2,7 @@ module Gollum
   class Macro
     class Video < Gollum::Macro
       def render (fname)
-        "<video width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"\"> HTML5 video is not supported on this Browser.</video>"
+        "<video width=\"100%\" height=\"100%\" src=\"#{CGI::escapeHTML(fname)}\" controls=\"true\"> HTML5 video is not supported on this Browser.</video>"
       end
     end
   end

data/lib/gollum-lib/markup.rb

@@ -23,7 +23,7 @@ module Gollum
     class << self
 
       def to_xml_opts
-        { :save_with => Nokogiri::XML::Node::SaveOptions::DEFAULT_XHTML ^ 1, :indent => 0, :encoding => 'UTF-8' }
+        { :save_with => Nokogiri::XML::Node::SaveOptions::DEFAULT_XHTML & (~Nokogiri::XML::Node::SaveOptions::FORMAT), :indent => 0, :encoding => 'UTF-8' }
       end
 
       # Only use the formats that are specified in config.rb

data/lib/gollum-lib/sanitization.rb

@@ -1,4 +1,5 @@
 ::Loofah::HTML5::SafeList::ACCEPTABLE_PROTOCOLS.add('apt')
+::Loofah::HTML5::SafeList::ALLOWED_ATTRIBUTES.add('controls')
 
 module Gollum
   class Sanitization

data/lib/gollum-lib/version.rb

@@ -1,5 +1,5 @@
 module Gollum
   module Lib
-    VERSION = '5.2.1'
+    VERSION = '5.2.2'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gollum-lib
 version: !ruby/object:Gem::Version
-  version: 5.2.1
+  version: 5.2.2
 platform: java
 authors:
 - Tom Preston-Werner
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-09-13 00:00:00.000000000 Z
+date: 2023-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gollum-rjgit_adapter
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.3
+rubygems_version: 3.2.32
 signing_key:
 specification_version: 4
 summary: A simple, Git-powered wiki.