grosser-validates_exclusion_of_html 0.1.1

data/README.markdown

@@ -0,0 +1,21 @@
+Simple filtering for html as validation.
+There are more complete and complex solutions out there, but this is simple/painless.
+
+    class User < ActiveRecord::Base
+      validates_exclusion_of_html :name, :username
+      validates_exclusion_of_html :firstname, :message=>'dont be evil...'
+    end
+
+Only supports :message option for now (default message is 'must not include &gt; or &lt;')
+
+Install
+=======
+    script/plugin install git://github.com/grosser/validates_exclusion_of_html.git
+OR
+    sudo gem install grosser-validates_exclusion_of_html
+
+Author
+======
+[Michael Grosser](http://pragmatig.wordpress.com)  
+grosser.michael@gmail.com  
+Hereby placed under public domain, do what you want, just do not hold me accountable...  

data/Rakefile

@@ -0,0 +1,21 @@
+desc "Run all specs in spec directory"
+task :default do
+  options = "--colour --format progress --loadby --reverse"
+  files = FileList['spec/**/*_spec.rb']
+  system("spec #{options} #{files}")
+end
+
+begin
+  project = 'validates_exclusion_of_html'
+  require 'jeweler'
+  Jeweler::Tasks.new do |gem|
+    gem.name = project
+    gem.summary = "ActiveRecord: Simple filtering for html as validation."
+    gem.email = "grosser.michael@gmail.com"
+    gem.homepage = "http://github.com/grosser/#{project}"
+    gem.authors = ["Michael Grosser"]
+    gem.files += (FileList["{vendor,lib,spec}/**/*"] + FileList["VERSION.yml"] + FileList["README.markdown"]).to_a.sort
+  end
+rescue LoadError
+  puts "Jeweler, or one of its dependencies, is not available. Install it with: sudo gem install technicalpickles-jeweler -s http://gems.github.com"
+end

data/VERSION.yml

@@ -0,0 +1,4 @@
+--- 
+:minor: 1
+:patch: 1
+:major: 0

data/lib/validates_exclusion_of_html.rb

@@ -0,0 +1,13 @@
+require 'activerecord'
+class ActiveRecord::Base
+  def self.validates_exclusion_of_html(*attributes)
+    options = attributes.extract_options!
+    validate do |object|
+      attributes.each do |attr|
+        if object.send(attr) =~ /<|>/
+          object.errors.add(attr,options[:message]||'must not include &gt; or &lt;')
+        end
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,3 @@
+# ---- requirements
+$LOAD_PATH.unshift File.expand_path("../lib", File.dirname(__FILE__))
+require 'validates_exclusion_of_html'

data/spec/validates_exclusion_of_html_spec.rb

@@ -0,0 +1,45 @@
+require File.join(File.dirname(__FILE__),'spec_helper')
+
+ActiveRecord::Base.establish_connection({
+  :adapter => "sqlite3",
+  :database => ":memory:",
+})
+
+ActiveRecord::Schema.define(:version => 1) do
+  create_table :users, :force=>true do |t|
+    t.string :name, :title
+    t.timestamps
+  end
+end
+
+class User < ActiveRecord::Base
+  validates_exclusion_of_html :name
+  validates_exclusion_of_html :title, :message=>'custom'
+end
+
+describe :validates_exclusion_of_html do
+  before do
+    @user = User.new(:name=>'<a>evil!</a>')
+  end
+
+  it "makes records invalid" do
+    @user.should_not be_valid
+  end
+
+  it "adds an error message to invalid objects" do
+    @user.errors.should be_empty
+    @user.valid?
+    @user.errors[:name].should == "must not include &gt; or &lt;"
+  end
+
+  it "adds a custom message" do
+    @user.title = '<script>fu</script>'
+    @user.valid?
+    @user.errors[:title].should == "custom"
+  end
+
+  it "does not mark valid records as invalid" do
+    @user.name = 'not so evil'
+    @user.should be_valid
+  end
+end

metadata

@@ -0,0 +1,59 @@
+--- !ruby/object:Gem::Specification 
+name: grosser-validates_exclusion_of_html
+version: !ruby/object:Gem::Version 
+  version: 0.1.1
+platform: ruby
+authors: 
+- Michael Grosser
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2009-06-06 00:00:00 -07:00
+default_executable: 
+dependencies: []
+
+description: 
+email: grosser.michael@gmail.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README.markdown
+files: 
+- README.markdown
+- Rakefile
+- VERSION.yml
+- lib/validates_exclusion_of_html.rb
+- spec/spec_helper.rb
+- spec/validates_exclusion_of_html_spec.rb
+has_rdoc: true
+homepage: http://github.com/grosser/validates_exclusion_of_html
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.2.0
+signing_key: 
+specification_version: 2
+summary: "ActiveRecord: Simple filtering for html as validation."
+test_files: 
+- spec/spec_helper.rb
+- spec/validates_exclusion_of_html_spec.rb