html-pipeline 2.8.0 → 2.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c0cb80b92116763887eb9bc64af92558b2815015
-  data.tar.gz: 5eebc5d33568174b06601689216f5be356beddcf
+  metadata.gz: 5751db02a634a5721bd625af546e3ce60f593b65
+  data.tar.gz: fbacb2afb9bc6917a3347efc10aabd04b40b2112
 SHA512:
-  metadata.gz: 61e782963adedaa74c905fad5b53deb80bd2d68c1f91a75dc411d85470152af4d5b9c0539e9a44bd81f2dc9bd8bec6970e2684fe818636f77f09523ad1f1b3f1
-  data.tar.gz: af237c77cab7ba80eeeb3b648dc5af698ff953c529da871495cab1fc53d82f50f6e4b43946430da43a8bd13d23e507fa6312cb8bad4187b9ec351a4b80f7b5f0
+  metadata.gz: 42d152c851c419327a109e6075de9f66ddf739d70d1db6d6e1e96208f55bae25085fd966d20309b3eebe9a9872227f85b89d0a38075ebf42ccb6fe117875f302
+  data.tar.gz: 3047a0de7183710fe99698cc9920aac302f41264a8f0492679d65e88b6b745796b18c65ddbe814ccb4ff26fab2c87941403c9b1824fe75f9c76a5bde8ffe05ef

data/README.md

@@ -186,6 +186,7 @@ gem 'rouge'
 * `PlainTextInputFilter` - `escape_utils`
 * `SanitizationFilter` - `sanitize`
 * `SyntaxHighlightFilter` - `rouge`
+* `TableOfContentsFilter` - `escape_utils`
 * `TextileFilter` - `RedCloth`
 
 _Note:_ See [Gemfile](/Gemfile) `:test` block for version requirements.

data/lib/html/pipeline/toc_filter.rb

@@ -1,3 +1,5 @@
+HTML::Pipeline.require_dependency('escape_utils', 'TableOfContentsFilter')
+
 module HTML
   class Pipeline
     # HTML filter that adds an 'id' attribute to all headers
@@ -43,7 +45,7 @@ module HTML
           uniq = headers[id] > 0 ? "-#{headers[id]}" : ''
           headers[id] += 1
           if header_content = node.children.first
-            result[:toc] << %(<li><a href="##{id}#{uniq}">#{text}</a></li>\n)
+            result[:toc] << %(<li><a href="##{id}#{uniq}">#{EscapeUtils.escape_html(text)}</a></li>\n)
             header_content.add_previous_sibling(%(<a id="#{id}#{uniq}" class="anchor" href="##{id}#{uniq}" aria-hidden="true">#{anchor_icon}</a>))
           end
         end

data/lib/html/pipeline/version.rb

@@ -1,5 +1,5 @@
 module HTML
   class Pipeline
-    VERSION = '2.8.0'.freeze
+    VERSION = '2.8.1'.freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: html-pipeline
 version: !ruby/object:Gem::Version
-  version: 2.8.0
+  version: 2.8.1
 platform: ruby
 authors:
 - Ryan Tomayko
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-05-04 00:00:00.000000000 Z
+date: 2018-06-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport