html-pipeline 2.8.3 → 2.8.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/html/pipeline/sanitization_filter.rb +19 -19
- data/lib/html/pipeline/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: fb5b0fea67fef5138ef398315d5dc7450b6c50d0
|
|
4
|
+
data.tar.gz: 8f34c17227a9707a3990c91d715e624ef7cbf85f
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e3158db053fab1a824c299aa67cab9404b0fd120059e80301729cf87913d205f48f933723c669abe4b8aec91b487acfdbc546a9e216404f449a85a29345a1158
|
|
7
|
+
data.tar.gz: c5a4207fdd287645940c721648ffee4469976891090bb886eb56cfcc0445cde85244d8741638df563b92f2ac730a7afd50fb4e9f56c0a124bc7e28ac836977e0
|
|
@@ -43,16 +43,16 @@ module HTML
|
|
|
43
43
|
div ins del sup sub p ol ul table thead tbody tfoot blockquote
|
|
44
44
|
dl dt dd kbd q samp var hr ruby rt rp li tr td th s strike summary
|
|
45
45
|
details caption figure figcaption
|
|
46
|
-
],
|
|
47
|
-
remove_contents: ['script'],
|
|
46
|
+
].freeze,
|
|
47
|
+
remove_contents: ['script'].freeze,
|
|
48
48
|
attributes: {
|
|
49
|
-
'a' => ['href'],
|
|
50
|
-
'img' => %w[src longdesc],
|
|
51
|
-
'div' => %w[itemscope itemtype],
|
|
52
|
-
'blockquote' => ['cite'],
|
|
53
|
-
'del' => ['cite'],
|
|
54
|
-
'ins' => ['cite'],
|
|
55
|
-
'q' => ['cite'],
|
|
49
|
+
'a' => ['href'].freeze,
|
|
50
|
+
'img' => %w[src longdesc].freeze,
|
|
51
|
+
'div' => %w[itemscope itemtype].freeze,
|
|
52
|
+
'blockquote' => ['cite'].freeze,
|
|
53
|
+
'del' => ['cite'].freeze,
|
|
54
|
+
'ins' => ['cite'].freeze,
|
|
55
|
+
'q' => ['cite'].freeze,
|
|
56
56
|
all: %w[abbr accept accept-charset
|
|
57
57
|
accesskey action align alt
|
|
58
58
|
aria-describedby aria-hidden aria-label aria-labelledby
|
|
@@ -70,18 +70,18 @@ module HTML
|
|
|
70
70
|
selected shape size span
|
|
71
71
|
start summary tabindex target
|
|
72
72
|
title type usemap valign value
|
|
73
|
-
vspace width itemprop]
|
|
74
|
-
},
|
|
73
|
+
vspace width itemprop].freeze
|
|
74
|
+
}.freeze,
|
|
75
75
|
protocols: {
|
|
76
76
|
'a' => { 'href' => ANCHOR_SCHEMES },
|
|
77
|
-
'blockquote' => { 'cite' => ['http', 'https', :relative] },
|
|
78
|
-
'del' => { 'cite' => ['http', 'https', :relative] },
|
|
79
|
-
'ins' => { 'cite' => ['http', 'https', :relative] },
|
|
80
|
-
'q' => { 'cite' => ['http', 'https', :relative] },
|
|
77
|
+
'blockquote' => { 'cite' => ['http', 'https', :relative].freeze },
|
|
78
|
+
'del' => { 'cite' => ['http', 'https', :relative].freeze },
|
|
79
|
+
'ins' => { 'cite' => ['http', 'https', :relative].freeze },
|
|
80
|
+
'q' => { 'cite' => ['http', 'https', :relative].freeze },
|
|
81
81
|
'img' => {
|
|
82
|
-
'src' => ['http', 'https', :relative],
|
|
83
|
-
'longdesc' => ['http', 'https', :relative]
|
|
84
|
-
}
|
|
82
|
+
'src' => ['http', 'https', :relative].freeze,
|
|
83
|
+
'longdesc' => ['http', 'https', :relative].freeze
|
|
84
|
+
}.freeze
|
|
85
85
|
},
|
|
86
86
|
transformers: [
|
|
87
87
|
# Top-level <li> elements are removed because they can break out of
|
|
@@ -102,7 +102,7 @@ module HTML
|
|
|
102
102
|
node.replace(node.children)
|
|
103
103
|
end
|
|
104
104
|
}
|
|
105
|
-
]
|
|
105
|
+
].freeze
|
|
106
106
|
}.freeze
|
|
107
107
|
|
|
108
108
|
# A more limited sanitization whitelist. This includes all attributes,
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: html-pipeline
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.8.
|
|
4
|
+
version: 2.8.4
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Ryan Tomayko
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2018-
|
|
12
|
+
date: 2018-07-24 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: activesupport
|