loofah 2.1.0.rc1 → 2.1.0.rc2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a709ec5b5b8064cd96fd216b5ac5ece3db3c2099
-  data.tar.gz: 212f9cb43700926714c873d2dd6ee661bcdb832a
+  metadata.gz: 85837747376afb9af97cc5e429abaa8616dcba29
+  data.tar.gz: d7e675aee95ea69c34aa1b962871c938153a9262
 SHA512:
-  metadata.gz: 31120a6cb665a25b264707c6a85aff7a14beab7269e20a3d4403a72ae0b2bf625b6942df6178e92e419b1859c7e48255f19c407003f031773426cf158a953d14
-  data.tar.gz: 21386a195c02a5faa3d52ff14f82534a087da91f009260d215bc07c8a46976803f424b2ddf4969756e7f63dec40ee0a270aac6d0549d9362fb87756da13b532d
+  metadata.gz: a67c17f6bb5b7d13708ba3495a85db7ff6435ef65deaef3c40d4316305f17afdb6c094e2913ad686e2a27bbcabfc82c88dc9955d8f89ca66b0788c3c86435018
+  data.tar.gz: 11a8c2f97e85b270cfae7a8da66410bf698bf77ec7e81943d869200da8291f2139a4f9d7dd1dfffbb255a50e7fe6c0c8d4094a8eb710875d737d649d1e0b978d

data/CHANGELOG.rdoc

@@ -1,10 +1,12 @@
 = Changelog
 
-== 2.1.0.rc1 / 2015-08-17
+== 2.1.0.rc2 / 2016-01-11
 
 Notes:
 
 * Re-implemented CSS parsing and sanitization using the {crass}[https://github.com/rgrove/crass] library. #91
+* Updated tests to ensure support for libxml 2.9.3.
+
 
 Bug fixes:
 

data/Gemfile

@@ -4,7 +4,8 @@
 
 source "https://rubygems.org/"
 
-gem "nokogiri", ">=1.5.9"
+#gem "nokogiri", ">=1.5.9"
+gem "nokogiri", :path => "../nokogiri"
 gem "crass", "~>1.0.2"
 
 gem "rdoc", "~>4.0", :group => [:development, :test]

data/lib/loofah.rb

@@ -27,7 +27,7 @@ require 'loofah/html/document_fragment'
 #
 module Loofah
   # The version of Loofah you are using
-  VERSION = '2.1.0.rc1'
+  VERSION = '2.1.0.rc2'
 
   class << self
     # Shortcut for Loofah::HTML::Document.parse

data/test/assets/testdata_sanitizer_tests1.dat

@@ -345,6 +345,7 @@
     "name": "should_sanitize_script_tag_with_multiple_open_brackets",
     "input": "<<script>alert(\"XSS\");//<</script>",
     "output": "alert(\"XSS\");//",
+    "xhtml": "&lt;&lt;script&gt;alert('XSS');//&lt;&lt;/script&gt;",
     "rexml": "Ill-formed XHTML!"
   },
 

data/test/html5/test_sanitizer.rb

@@ -251,14 +251,14 @@ class Html5TestSanitizer < Loofah::TestCase
   def test_upper_case_css_property
     html = "<div style=\"COLOR: BLUE; NOTAPROPERTY: RED;\">asdf</div>"
     sane = Nokogiri::HTML(Loofah.scrub_fragment(html, :strip).to_xml)
-    assert_match /COLOR:\s*BLUE/i, sane.at_css("div")["style"]
-    refute_match /NOTAPROPERTY/i, sane.at_css("div")["style"]
+    assert_match(/COLOR:\s*BLUE/i, sane.at_css("div")["style"])
+    refute_match(/NOTAPROPERTY/i, sane.at_css("div")["style"])
   end
 
   def test_many_properties_some_allowed
     html = "<div style=\"background: bold notaproperty center alsonotaproperty 10px;\">asdf</div>"
     sane = Nokogiri::HTML(Loofah.scrub_fragment(html, :strip).to_xml)
-    assert_match /bold\s+center\s+10px/, sane.at_css("div")["style"]
+    assert_match(/bold\s+center\s+10px/, sane.at_css("div")["style"])
   end
 
   def test_many_properties_non_allowed
@@ -270,7 +270,7 @@ class Html5TestSanitizer < Loofah::TestCase
   def test_svg_properties
     html = "<line style='stroke-width: 10px;'></line>"
     sane = Nokogiri::HTML(Loofah.scrub_fragment(html, :strip).to_xml)
-    assert_match /stroke-width:\s*10px/, sane.at_css("line")["style"]
+    assert_match(/stroke-width:\s*10px/, sane.at_css("line")["style"])
   end
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: loofah
 version: !ruby/object:Gem::Version
-  version: 2.1.0.rc1
+  version: 2.1.0.rc2
 platform: ruby
 authors:
 - Mike Dalessio
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-17 00:00:00.000000000 Z
+date: 2016-01-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri
@@ -171,14 +171,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.13'
+        version: '3.14'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.13'
+        version: '3.14'
 description: |-
   Loofah is a general library for manipulating and transforming HTML/XML
   documents and fragments. It's built on top of Nokogiri and libxml2, so
@@ -262,7 +262,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.6
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: Loofah is a general library for manipulating and transforming HTML/XML documents