loofah 1.0.0 → 2.19.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (42) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +489 -0
  3. data/MIT-LICENSE.txt +3 -1
  4. data/README.md +364 -0
  5. data/SECURITY.md +18 -0
  6. data/lib/loofah/elements.rb +88 -11
  7. data/lib/loofah/helpers.rb +76 -2
  8. data/lib/loofah/html/document.rb +1 -0
  9. data/lib/loofah/html/document_fragment.rb +9 -2
  10. data/lib/loofah/html5/libxml2_workarounds.rb +27 -0
  11. data/lib/loofah/html5/safelist.rb +1042 -0
  12. data/lib/loofah/html5/scrub.rb +198 -40
  13. data/lib/loofah/instance_methods.rb +16 -10
  14. data/lib/loofah/metahelpers.rb +9 -10
  15. data/lib/loofah/scrubber.rb +22 -6
  16. data/lib/loofah/scrubbers.rb +96 -16
  17. data/lib/loofah/version.rb +5 -0
  18. data/lib/loofah/xml/document.rb +1 -0
  19. data/lib/loofah/xml/document_fragment.rb +5 -2
  20. data/lib/loofah.rb +38 -25
  21. metadata +159 -172
  22. data/CHANGELOG.rdoc +0 -134
  23. data/Gemfile +0 -1
  24. data/Manifest.txt +0 -34
  25. data/README.rdoc +0 -312
  26. data/Rakefile +0 -53
  27. data/benchmark/benchmark.rb +0 -149
  28. data/benchmark/fragment.html +0 -96
  29. data/benchmark/helper.rb +0 -73
  30. data/benchmark/www.slashdot.com.html +0 -2560
  31. data/lib/loofah/html5/whitelist.rb +0 -168
  32. data/test/helper.rb +0 -7
  33. data/test/html5/test_sanitizer.rb +0 -248
  34. data/test/integration/test_ad_hoc.rb +0 -176
  35. data/test/integration/test_helpers.rb +0 -33
  36. data/test/integration/test_html.rb +0 -51
  37. data/test/integration/test_scrubbers.rb +0 -331
  38. data/test/integration/test_xml.rb +0 -55
  39. data/test/unit/test_api.rb +0 -138
  40. data/test/unit/test_helpers.rb +0 -27
  41. data/test/unit/test_scrubber.rb +0 -229
  42. data/test/unit/test_scrubbers.rb +0 -14
data/test/unit/test_scrubber.rb DELETED
@@ -1,229 +0,0 @@
1
- require File.expand_path(File.join(File.dirname(__FILE__), '..', 'helper'))
2
-
3
- class TestScrubber < Test::Unit::TestCase
4
-
5
- FRAGMENT = "<span>hello</span><span>goodbye</span>"
6
- FRAGMENT_NODE_COUNT = 4 # span, text, span, text
7
- FRAGMENT_NODE_STOP_TOP_DOWN = 2 # span, span
8
- DOCUMENT = "<html><head><link></link></head><body><span>hello</span><span>goodbye</span></body></html>"
9
- DOCUMENT_NODE_COUNT = 8 # html, head, link, body, span, text, span, text
10
- DOCUMENT_NODE_STOP_TOP_DOWN = 1 # html
11
-
12
- context "receiving a block" do
13
- setup do
14
- @count = 0
15
- end
16
-
17
- context "returning CONTINUE" do
18
- setup do
19
- @scrubber = Loofah::Scrubber.new do |node|
20
- @count += 1
21
- Loofah::Scrubber::CONTINUE
22
- end
23
- end
24
-
25
- should "operate properly on a fragment" do
26
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
27
- assert_equal FRAGMENT_NODE_COUNT, @count
28
- end
29
-
30
- should "operate properly on a document" do
31
- Loofah.scrub_document(DOCUMENT, @scrubber)
32
- assert_equal DOCUMENT_NODE_COUNT, @count
33
- end
34
- end
35
-
36
- context "returning STOP" do
37
- setup do
38
- @scrubber = Loofah::Scrubber.new do |node|
39
- @count += 1
40
- Loofah::Scrubber::STOP
41
- end
42
- end
43
-
44
- should "operate as top-down on a fragment" do
45
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
46
- assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
47
- end
48
-
49
- should "operate as top-down on a document" do
50
- Loofah.scrub_document(DOCUMENT, @scrubber)
51
- assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
52
- end
53
- end
54
-
55
- context "returning neither CONTINUE nor STOP" do
56
- setup do
57
- @scrubber = Loofah::Scrubber.new do |node|
58
- @count += 1
59
- end
60
- end
61
-
62
- should "act as if CONTINUE was returned" do
63
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
64
- assert_equal FRAGMENT_NODE_COUNT, @count
65
- end
66
- end
67
-
68
- context "not specifying direction" do
69
- setup do
70
- @scrubber = Loofah::Scrubber.new() do |node|
71
- @count += 1
72
- Loofah::Scrubber::STOP
73
- end
74
- end
75
-
76
- should "operate as top-down on a fragment" do
77
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
78
- assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
79
- end
80
-
81
- should "operate as top-down on a document" do
82
- Loofah.scrub_document(DOCUMENT, @scrubber)
83
- assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
84
- end
85
- end
86
-
87
- context "specifying top-down direction" do
88
- setup do
89
- @scrubber = Loofah::Scrubber.new(:direction => :top_down) do |node|
90
- @count += 1
91
- Loofah::Scrubber::STOP
92
- end
93
- end
94
-
95
- should "operate as top-down on a fragment" do
96
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
97
- assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
98
- end
99
-
100
- should "operate as top-down on a document" do
101
- Loofah.scrub_document(DOCUMENT, @scrubber)
102
- assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
103
- end
104
- end
105
-
106
- context "specifying bottom-up direction" do
107
- setup do
108
- @scrubber = Loofah::Scrubber.new(:direction => :bottom_up) do |node|
109
- @count += 1
110
- end
111
- end
112
-
113
- should "operate as bottom-up on a fragment" do
114
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
115
- assert_equal FRAGMENT_NODE_COUNT, @count
116
- end
117
-
118
- should "operate as bottom-up on a document" do
119
- Loofah.scrub_document(DOCUMENT, @scrubber)
120
- assert_equal DOCUMENT_NODE_COUNT, @count
121
- end
122
- end
123
-
124
- context "invalid direction" do
125
- should "raise an exception" do
126
- assert_raises(ArgumentError) {
127
- Loofah::Scrubber.new(:direction => :quux) { }
128
- }
129
- end
130
- end
131
-
132
- context "given a block taking zero arguments" do
133
- setup do
134
- @scrubber = Loofah::Scrubber.new do
135
- @count += 1
136
- end
137
- end
138
-
139
- should "work anyway, shrug" do
140
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
141
- assert_equal FRAGMENT_NODE_COUNT, @count
142
- end
143
- end
144
- end
145
-
146
- context "defining a new Scrubber class" do
147
- setup do
148
- @klass = Class.new(Loofah::Scrubber) do
149
- attr_accessor :count
150
-
151
- def initialize(direction=nil)
152
- @direction = direction
153
- @count = 0
154
- end
155
-
156
- def scrub(node)
157
- @count += 1
158
- Loofah::Scrubber::STOP
159
- end
160
- end
161
- end
162
-
163
- context "when not specifying direction" do
164
- setup do
165
- @scrubber = @klass.new
166
- assert_nil @scrubber.direction
167
- end
168
-
169
- should "operate as top-down on a fragment" do
170
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
171
- assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @scrubber.count
172
- end
173
-
174
- should "operate as top-down on a document" do
175
- Loofah.scrub_document(DOCUMENT, @scrubber)
176
- assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @scrubber.count
177
- end
178
- end
179
-
180
- context "when direction is specified as top_down" do
181
- setup do
182
- @scrubber = @klass.new(:top_down)
183
- assert_equal :top_down, @scrubber.direction
184
- end
185
-
186
- should "operate as top-down on a fragment" do
187
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
188
- assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @scrubber.count
189
- end
190
-
191
- should "operate as top-down on a document" do
192
- Loofah.scrub_document(DOCUMENT, @scrubber)
193
- assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @scrubber.count
194
- end
195
- end
196
-
197
- context "when direction is specified as bottom_up" do
198
- setup do
199
- @scrubber = @klass.new(:bottom_up)
200
- assert_equal :bottom_up, @scrubber.direction
201
- end
202
-
203
- should "operate as bottom-up on a fragment" do
204
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
205
- assert_equal FRAGMENT_NODE_COUNT, @scrubber.count
206
- end
207
-
208
- should "operate as bottom-up on a document" do
209
- Loofah.scrub_document(DOCUMENT, @scrubber)
210
- assert_equal DOCUMENT_NODE_COUNT, @scrubber.count
211
- end
212
- end
213
- end
214
-
215
- context "creating a new Scrubber class with no scrub method" do
216
- setup do
217
- @klass = Class.new(Loofah::Scrubber) do
218
- def initialize ; end
219
- end
220
- @scrubber = @klass.new
221
- end
222
-
223
- should "raise an exception" do
224
- assert_raises(Loofah::ScrubberNotFound) {
225
- Loofah.scrub_fragment(FRAGMENT, @scrubber)
226
- }
227
- end
228
- end
229
- end
data/test/unit/test_scrubbers.rb DELETED
@@ -1,14 +0,0 @@
1
- require File.expand_path(File.join(File.dirname(__FILE__), '..', 'helper'))
2
-
3
- class TestScrubbers < Test::Unit::TestCase
4
- [ Loofah::HTML::Document, Loofah::HTML::DocumentFragment ].each do |klass|
5
- context klass do
6
- context "bad scrub method" do
7
- should "raise a ScrubberNotFound exception" do
8
- doc = klass.parse "<p>foo</p>"
9
- assert_raises(Loofah::ScrubberNotFound) { doc.scrub! :frippery }
10
- end
11
- end
12
- end
13
- end
14
- end