RubyGems - loofah - Versions diffs - 2.2.3 → 2.19.0 - Mend

loofah 2.2.3 → 2.19.0

Potentially problematic release.

This version of loofah might be problematic. Click here for more details.

Files changed (42) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +212 -31
data/README.md +18 -24
data/lib/loofah/elements.rb +79 -75
data/lib/loofah/helpers.rb +18 -7
data/lib/loofah/html/document.rb +1 -0
data/lib/loofah/html/document_fragment.rb +4 -2
data/lib/loofah/html5/libxml2_workarounds.rb +8 -7
data/lib/loofah/html5/safelist.rb +1043 -0
data/lib/loofah/html5/scrub.rb +73 -48
data/lib/loofah/instance_methods.rb +14 -8
data/lib/loofah/metahelpers.rb +2 -1
data/lib/loofah/scrubber.rb +8 -7
data/lib/loofah/scrubbers.rb +19 -13
data/lib/loofah/version.rb +5 -0
data/lib/loofah/xml/document.rb +1 -0
data/lib/loofah/xml/document_fragment.rb +2 -1
data/lib/loofah.rb +35 -18
metadata +52 -138
data/.gemtest +0 -0
data/Gemfile +0 -22
data/Manifest.txt +0 -40
data/Rakefile +0 -79
data/benchmark/benchmark.rb +0 -149
data/benchmark/fragment.html +0 -96
data/benchmark/helper.rb +0 -73
data/benchmark/www.slashdot.com.html +0 -2560
data/lib/loofah/html5/whitelist.rb +0 -186
data/test/assets/msword.html +0 -63
data/test/assets/testdata_sanitizer_tests1.dat +0 -502
data/test/helper.rb +0 -18
data/test/html5/test_sanitizer.rb +0 -382
data/test/integration/test_ad_hoc.rb +0 -204
data/test/integration/test_helpers.rb +0 -43
data/test/integration/test_html.rb +0 -72
data/test/integration/test_scrubbers.rb +0 -400
data/test/integration/test_xml.rb +0 -55
data/test/unit/test_api.rb +0 -142
data/test/unit/test_encoding.rb +0 -20
data/test/unit/test_helpers.rb +0 -62
data/test/unit/test_scrubber.rb +0 -229
data/test/unit/test_scrubbers.rb +0 -14

data/test/unit/test_helpers.rb DELETED Viewed

@@ -1,62 +0,0 @@
-require "helper"
-class UnitTestHelpers < Loofah::TestCase
-  HTML_STRING = "<div>omgwtfbbq</div>"
-  describe "Helpers" do
-    context ".strip_tags" do
-      it "invoke Loofah.fragment.text" do
-        mock_doc = Object.new
-        mock(Loofah).fragment(HTML_STRING) { mock_doc }
-        mock(mock_doc).text
-        Loofah::Helpers.strip_tags HTML_STRING
-      end
-    end
-    context ".sanitize" do
-      it "invoke Loofah.scrub_fragment(:strip).to_s" do
-        mock_doc = Object.new
-        mock_node = Object.new
-        mock(Loofah).fragment(HTML_STRING) { mock_doc }
-        mock(mock_doc).scrub!(:strip) { mock_doc }
-        mock(mock_doc).xpath("./form") { [mock_node] }
-        mock(mock_node).remove
-        mock(mock_doc).to_s
-        Loofah::Helpers.sanitize HTML_STRING
-      end
-    end
-    context ".sanitize_css" do
-      it "invokes HTML5lib's css scrubber" do
-        mock(Loofah::HTML5::Scrub).scrub_css("foobar")
-        Loofah::Helpers.sanitize_css("foobar")
-      end
-    end
-    describe "ActionView" do
-      describe "FullSanitizer#sanitize" do
-        it "calls .strip_tags" do
-          mock(Loofah::Helpers).strip_tags("foobar")
-          Loofah::Helpers::ActionView::FullSanitizer.new.sanitize "foobar"
-        end
-      end
-      describe "WhiteListSanitizer#sanitize" do
-        it "calls .sanitize" do
-          mock(Loofah::Helpers).sanitize("foobar")
-          Loofah::Helpers::ActionView::WhiteListSanitizer.new.sanitize "foobar"
-        end
-      end
-      describe "WhiteListSanitizer#sanitize_css" do
-        it "calls .sanitize_css" do
-          mock(Loofah::Helpers).sanitize_css("foobar")
-          Loofah::Helpers::ActionView::WhiteListSanitizer.new.sanitize_css "foobar"
-        end
-      end
-    end
-  end
-end

data/test/unit/test_scrubber.rb DELETED Viewed

@@ -1,229 +0,0 @@
-require "helper"
-class UnitTestScrubber < Loofah::TestCase
-  FRAGMENT = "<span>hello</span><span>goodbye</span>"
-  FRAGMENT_NODE_COUNT         = 4 # span, text, span, text
-  FRAGMENT_NODE_STOP_TOP_DOWN = 2 # span, span
-  DOCUMENT = "<html><head><link></link></head><body><span>hello</span><span>goodbye</span></body></html>"
-  DOCUMENT_NODE_COUNT         = 8 # html, head, link, body, span, text, span, text
-  DOCUMENT_NODE_STOP_TOP_DOWN = 1 # html
-  context "receiving a block" do
-    before do
-      @count = 0
-    end
-    context "returning CONTINUE" do
-      before do
-        @scrubber = Loofah::Scrubber.new do |node|
-          @count += 1
-          Loofah::Scrubber::CONTINUE
-        end
-      end
-      it "operate properly on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_COUNT, @count
-      end
-      it "operate properly on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_COUNT, @count
-      end
-    end
-    context "returning STOP" do
-      before do
-        @scrubber = Loofah::Scrubber.new do |node|
-          @count += 1
-          Loofah::Scrubber::STOP
-        end
-      end
-      it "operate as top-down on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
-      end
-      it "operate as top-down on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
-      end
-    end
-    context "returning neither CONTINUE nor STOP" do
-      before do
-        @scrubber = Loofah::Scrubber.new do |node|
-          @count += 1
-        end
-      end
-      it "act as if CONTINUE was returned" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_COUNT, @count
-      end
-    end
-    context "not specifying direction" do
-      before do
-        @scrubber = Loofah::Scrubber.new() do |node|
-          @count += 1
-          Loofah::Scrubber::STOP
-        end
-      end
-      it "operate as top-down on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
-      end
-      it "operate as top-down on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
-      end
-    end
-    context "specifying top-down direction" do
-      before do
-        @scrubber = Loofah::Scrubber.new(:direction => :top_down) do |node|
-          @count += 1
-          Loofah::Scrubber::STOP
-        end
-      end
-      it "operate as top-down on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @count
-      end
-      it "operate as top-down on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @count
-      end
-    end
-    context "specifying bottom-up direction" do
-      before do
-        @scrubber = Loofah::Scrubber.new(:direction => :bottom_up) do |node|
-          @count += 1
-        end
-      end
-      it "operate as bottom-up on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_COUNT, @count
-      end
-      it "operate as bottom-up on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_COUNT, @count
-      end
-    end
-    context "invalid direction" do
-      it "raise an exception" do
-        assert_raises(ArgumentError) {
-          Loofah::Scrubber.new(:direction => :quux) { }
-        }
-      end
-    end
-    context "given a block taking zero arguments" do
-      before do
-        @scrubber = Loofah::Scrubber.new do
-          @count += 1
-        end
-      end
-      it "work anyway, shrug" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_COUNT, @count
-      end
-    end
-  end
-  context "defining a new Scrubber class" do
-    before do
-      @klass = Class.new(Loofah::Scrubber) do
-        attr_accessor :count
-        def initialize(direction=nil)
-          @direction = direction
-          @count = 0
-        end
-        def scrub(node)
-          @count += 1
-          Loofah::Scrubber::STOP
-        end
-      end
-    end
-    context "when not specifying direction" do
-      before do
-        @scrubber = @klass.new
-        assert_nil @scrubber.direction
-      end
-      it "operate as top-down on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @scrubber.count
-      end
-      it "operate as top-down on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @scrubber.count
-      end
-    end
-    context "when direction is specified as top_down" do
-      before do
-        @scrubber = @klass.new(:top_down)
-        assert_equal :top_down, @scrubber.direction
-      end
-      it "operate as top-down on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_STOP_TOP_DOWN, @scrubber.count
-      end
-      it "operate as top-down on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_STOP_TOP_DOWN, @scrubber.count
-      end
-    end
-    context "when direction is specified as bottom_up" do
-      before do
-        @scrubber = @klass.new(:bottom_up)
-        assert_equal :bottom_up, @scrubber.direction
-      end
-      it "operate as bottom-up on a fragment" do
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-        assert_equal FRAGMENT_NODE_COUNT, @scrubber.count
-      end
-      it "operate as bottom-up on a document" do
-        Loofah.scrub_document(DOCUMENT, @scrubber)
-        assert_equal DOCUMENT_NODE_COUNT, @scrubber.count
-      end
-    end
-  end
-  context "creating a new Scrubber class with no scrub method" do
-    before do
-      @klass = Class.new(Loofah::Scrubber) do
-        def initialize ; end
-      end
-      @scrubber = @klass.new
-    end
-    it "raise an exception" do
-      assert_raises(Loofah::ScrubberNotFound) {
-        Loofah.scrub_fragment(FRAGMENT, @scrubber)
-      }
-    end
-  end
-end

data/test/unit/test_scrubbers.rb DELETED Viewed

@@ -1,14 +0,0 @@
-require "helper"
-class UnitTestScrubbers < Loofah::TestCase
-  [ Loofah::HTML::Document, Loofah::HTML::DocumentFragment ].each do |klass|
-    context klass do
-      context "bad scrub method" do
-        it "raise a ScrubberNotFound exception" do
-          doc = klass.parse "<p>foo</p>"
-          assert_raises(Loofah::ScrubberNotFound) { doc.scrub! :frippery }
-        end
-      end
-    end
-  end
-end