gretel-jsonld 1.0.0.rc2 → 1.0.0.rc3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 7dfbef306b03de0170d6e278bc17e64ac69ab4320149d4ed57d110a1b0b06443
4
- data.tar.gz: 427536dd86a6a0bdbac24f3161c3fdaca260fff46c1df338910ae0dcf44d9b7b
3
+ metadata.gz: 9490d6211513f3b5970ff1888e491debead568a28326dda7ec98e5c86c73852f
4
+ data.tar.gz: 29aa6ec7707b8d49ab5bf91f035122900dfbc051a5d09016f5607003389b1781
5
5
  SHA512:
6
- metadata.gz: c79c9b6967e6285da8160ee6213b4e1ace7b35e22b60cae941f336ad683b8e23622f3717c8d30315476a8abdaa11f41d7ce018439df394eea56fe568976810db
7
- data.tar.gz: f55a13d8f0173e30ae32c382f6f11e2ab1074231961da4f391b8c3b1a9c0b4837351976beb53086c276a64e6a9f61f73c0ebe49fc056504d173a475295a04b23
6
+ metadata.gz: a50316418bd19b032cad44d9b2cf3e8f380eae53ac3c7855ead9739a0542ebc5c41dbdfe89de928af531ea4e9cb4a00afd62c1087b0f26eb03c31b6fa7c81580
7
+ data.tar.gz: 1e9b04b29cb31ca3444a3e24f08f6a20bfabdb65dbbf1128de255f0ed2b5b97f4ee6b580cb230a853cd9811f57e78a1bfcf9d2dd960a2e36f0ba7db3b59feaeb
data/CHANGELOG.md CHANGED
@@ -1,5 +1,9 @@
1
1
  # CHANGELOG
2
2
 
3
+ ## [1.0.0.rc3](https://github.com/yasaichi/gretel-jsonld/releases/tag/v1.0.0.rc3) (August 4, 2026)
4
+
5
+ * [Prevent XSS in JSON-LD breadcrumb output](https://github.com/yasaichi/gretel-jsonld/pull/36)
6
+
3
7
  ## [1.0.0.rc2](https://github.com/yasaichi/gretel-jsonld/releases/tag/v1.0.0.rc2) (July 24, 2026)
4
8
 
5
9
  * [Use HTTPS for Schema.org context](https://github.com/yasaichi/gretel-jsonld/pull/32)
@@ -19,7 +19,10 @@ module Gretel
19
19
 
20
20
  @view_context.content_tag(
21
21
  :script,
22
- ::JSON.generate(to_breadcrumb_list(link_collection)).html_safe,
22
+ to_breadcrumb_list(link_collection)
23
+ .yield_self { |list| ::JSON.generate(list) }
24
+ .yield_self { |json| ::ERB::Util.json_escape(json) }
25
+ .html_safe,
23
26
  type: "application/ld+json",
24
27
  )
25
28
  end
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Gretel
4
4
  module JSONLD
5
- VERSION = "1.0.0.rc2"
5
+ VERSION = "1.0.0.rc3"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: gretel-jsonld
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.0.rc2
4
+ version: 1.0.0.rc3
5
5
  platform: ruby
6
6
  authors:
7
7
  - yasaichi