growlyflash 0.9.2 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 119f6777b3a1d7d4c6d7c22284397c27095a79dc
-  data.tar.gz: d385503f4843ea21f63770425477a68469b6c1ac
+  metadata.gz: 31ac0731d739e0bf94072acae27ec1e8a284eb9c
+  data.tar.gz: fb39aca149ec6badd0ae036d63243aedd9b4a414
 SHA512:
-  metadata.gz: ba08a50c8830ae41579f1987c08661c66ed62cb7ba92edf2aef2a7ce3cabbfa71de04b09738b6b82d91ebb35ed02e914105c35301b204a97380e785d3c52dd72
-  data.tar.gz: 0b57735dd401c6c1d9f0d4198b300530f8d03f3877fd6688268bdd2377291b9a2e29c0587d7055e57274d281b38f4223700ae576c6f6124aab25164909813751
+  metadata.gz: 666ae9b2d564eb68b4b862ae49e530325197cea43847ab0c02b9e601a37553f98cd01fba471d79d9d9db02ee1d8c87570e54956b52e9e295d9bab99451507a05
+  data.tar.gz: 0a0972863b3488223eec14afa49acfe546524ea3d118acb8f073a0eb24dc0b5dac1d392160132fca7e32dd9d24ea7c34f7ee2391a4978cfda450ab6edfb00879

data/README.md

@@ -53,6 +53,16 @@ To make notifications also available with non-XHR requests, insert the following
 <%= growlyflash_static_notices %>
 ```
 
+If you want your website to be compliant with Content-Security-Policy, and
+especially avoid `script-src: 'unsafe-inline'`, you can use another helper to
+render an html tag with data attributes instead of injecting javascript code
+into your page:
+
+```erb
+<%= growlyflash_tag %>
+```
+
+
 ## Customize
 
 If you want to change default options, you can override them somewhere in your coffee/js:

data/app/assets/javascripts/growlyflash/listener.coffee

@@ -31,16 +31,20 @@ class Listener
 
   constructor: (context) ->
     @stack ?= new Stack()
-    @process_static() if window.flashes?
+    @process_static(context)
     ($ context).on Growlyflash.Listener.EVENTS, (event, xhr) =>
       if xhr ?= event.data?.xhr
         source = process_from_header(xhr.getResponseHeader(Growlyflash.Listener.HEADER))
         @stack.push_only_fresh source
       return
 
-  process_static: ->
-    @stack.push alert for alert in process(window.flashes)
-    delete window.flashes
+  process_static: (context)->
+    if tag = context.getElementById('growlyflash-tag')
+      tag_flashes = JSON.parse(tag.getAttribute('data-flashes'))
+      @stack.push alert for alert in process(tag_flashes)
+    else if window.flashes?
+      @stack.push alert for alert in process(window.flashes)
+      delete window.flashes 
 
 @Growlyflash.Listener = Listener
 @Growlyflash.listen_on = (context) ->

data/lib/growlyflash/controller_additions.rb

@@ -4,7 +4,7 @@ module Growlyflash
       base.module_eval do
         extend ClassMethods
         if respond_to?(:helper_method)
-          helper_method :growlyflash_static_notices, :growlyhash
+          helper_method :growlyflash_static_notices, :growlyhash, :growlyflash_tag
         end
       end
     end
@@ -38,6 +38,16 @@ module Growlyflash
       view_context.javascript_tag(script, defer: 'defer')
     end
 
+    # View helper which render a tag with flashes messages in data attribute.
+    def growlyflash_tag
+      return if flash.empty?
+      view_context.tag(
+        :div,
+        id: 'growlyflash-tag',
+        'data-flashes': growlyhash.to_json.html_safe
+      )
+    end
+
     # Hash with available growl flash messages which contains a string object.
     def growlyhash(force = false)
       @growlyhash = nil if force

data/lib/growlyflash/version.rb

@@ -1,3 +1,3 @@
 module Growlyflash
-  VERSION = "0.9.2"
+  VERSION = "0.10.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: growlyflash
 version: !ruby/object:Gem::Version
-  version: 0.9.2
+  version: 0.10.0
 platform: ruby
 authors:
 - Tõnis Simo
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-05-02 00:00:00.000000000 Z
+date: 2017-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -117,7 +117,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.6.13
 signing_key: 
 specification_version: 4
 summary: Popup ActionDispatch::Flash within Bootstrap alert in Rails app like a growl