inquisition 0.3 → 0.3.1

data/lib/inquisition.rb

@@ -38,7 +38,8 @@ module Inquisition
         define_method(:read_attribute_with_cleansing) do |attribute|
           value = read_attribute_without_cleansing(attribute)
           if cleansed_attr_readers.include?(attribute.to_sym) && !value.blank?
-            Inquisition.sanitize(value,cleansed_attr_reader_options[:allow][attribute.to_sym])
+            Inquisition.sanitize(value,
+              cleansed_attr_reader_options[:allow] ? cleansed_attr_reader_options[:allow][attribute.to_sym] : nil)
           else
             value
           end
@@ -62,7 +63,8 @@ module Inquisition
 
         define_method(:write_attribute_with_cleansing) do |attribute, value|
           if cleansed_attr_writers.include?(attribute.to_sym) && !value.blank?
-            Inquisition.sanitize(value,cleansed_attr_writer_options[:allow][attribute.to_sym])
+            Inquisition.sanitize(value,
+              cleansed_attr_writer_options[:allow] ? cleansed_attr_writer_options[:allow][attribute.to_sym] : nil)
           end
           write_attribute_without_cleansing(attribute, value)
         end

data/test/inquisition_test.rb

@@ -84,4 +84,9 @@ class InquisitionTest < Test::Unit::TestCase
       assert_equal "&lt;script&gt;alert('Cragganmore')&lt;/script&gt;", @whisky.measure
     end
   end
+
+  should "not die gruesomely without options specified" do
+    animal = Animal.new(:name => "<script>alert('Grue')</script>")
+    assert_equal "&lt;script&gt;alert('Grue')&lt;/script&gt;", animal.name
+  end
 end

data/test/models.rb

@@ -15,6 +15,8 @@ end
 CreateSchema.suppress_messages { CreateSchema.migrate(:up) }
 
 class Animal < ActiveRecord::Base
+  sanitize_attribute :name
+
   def bark
     "#{noise.capitalize}! #{noise.capitalize}!"
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: inquisition
 version: !ruby/object:Gem::Version 
-  version: "0.3"
+  version: 0.3.1
 platform: ruby
 authors: 
 - toothrot
@@ -69,7 +69,7 @@ requirements: []
 rubyforge_project: 
 rubygems_version: 1.3.5
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: Inquisition is a fancy way to protect your ActiveRecord attributes from XSS
 test_files: []