isc_analytics 0.6.0 → 0.6.1

data/lib/isc_analytics/client_api.rb

@@ -7,7 +7,7 @@ module IscAnalytics
         if properties.blank?
           enqueue 'identify', identifier
         else
-          enqueue 'identify', identifier, properties
+          enqueue 'identify', identifier, escape_properties(properties)
         end
         set_identity(identifier)
       end
@@ -21,19 +21,19 @@ module IscAnalytics
     def track_event(name, properties = {})
       unless name.blank?
         if properties.blank?
-          enqueue 'trackEvent', name
+          enqueue 'trackEvent', CGI::escapeHTML(name)
         else
-          enqueue 'trackEvent', name, properties
+          enqueue 'trackEvent', CGI::escapeHTML(name), escape_properties(properties)
         end
       end
     end
 
     def set_properties(properties = {})
-      enqueue('setProperties', properties) unless properties.blank?
+      enqueue('setProperties', escape_properties(properties)) unless properties.blank?
     end
 
     def set_property(property, value = nil)
-      enqueue('setProperty', property, value) unless property.blank?
+      enqueue('setProperty', CGI::escapeHTML(property), value ? CGI::escapeHTML(value) : value) unless property.blank?
     end
 
     # reset_queue makes sure that subsequent calls will not send events that have already been sent.
@@ -91,5 +91,9 @@ module IscAnalytics
       queue.delete_if { |api_call| !(/identify/ =~ api_call).nil? }
     end
 
+    def escape_properties(properties)
+      Hash[properties.map{ |k, v| [(k.kind_of?(String) ? CGI::escapeHTML(k) : k), (v.kind_of?(String) ? CGI::escapeHTML(v) : v)] }]
+    end
+
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: isc_analytics
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.6.1
   prerelease: 
 platform: ruby
 authors:
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-02-20 00:00:00.000000000 Z
+date: 2013-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: controller_support