mumukit-content-type 1.3.1 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7aedd885623474e1042495be8d2feb3ce324ae41d4b0bcea728f4c84d8fb9cfa
-  data.tar.gz: ea4f7890b2fc9bf079017943b2cde767aace30727c09d636c3d517a8b159bce7
+  metadata.gz: 4fdf9d6b5af5bcdb4de689b9a5489880aca70a4b9dabd7343e3c7510026b4149
+  data.tar.gz: 143fba3f1f5cc5e9cd4410019d57a984bc3d1e12e20341bbb608dcf007b3833a
 SHA512:
-  metadata.gz: c7f9f1a844ca3e19c28fa5497c3cb3f54a455ca46e15ef37a632cb1c6cdfd132fe016c026279c91d2433ed8f680cca83fcbe4b452ddb7f89b8c19fb68bd56f8f
-  data.tar.gz: a463b43ae6bf86313194807678181bbaa8d36e11f2bc8ea3f9d50e13905e4fea64fbba2ebe5cf5a4c0be3317527b667280fe626e7da33d50a205fb2953bb9615
+  metadata.gz: dd20954abd94ceaceb2d6a9ff2310d843a1410a5b94b8d7352d06dd62330cca4469626380ee7f1d581dfdc549d3be35f8b612b204e0d8ffb8db8238170006c0a
+  data.tar.gz: 646b6a9b35e54dbd33de377bb08b386a4e6c2d1fbfdfa0d2a926a9b402625e6b110ad723d31736f59d9765921d0bc396ff2c0a34ce11b438e52348da0f9c2ad9

data/lib/mumukit/content_type.rb

@@ -7,6 +7,10 @@ module Mumukit
       def format_exception(e)
         "#{title e.message}\n#{code e.backtrace.join("\n")}"
       end
+
+      def to_html(content)
+        Mumukit::ContentType::Sanitizer.sanitize(htmlize content).html_safe
+      end
     end
 
     def self.parse(s)
@@ -21,6 +25,7 @@ module Mumukit
   end
 end
 
+require_relative './content_type/sanitizer'
 require_relative './content_type/emoji'
 require_relative './content_type/markdown'
 require_relative './content_type/with_markdown'

data/lib/mumukit/content_type/html.rb

@@ -9,8 +9,8 @@ module Mumukit::ContentType::Html
     "<pre>#{code}</pre>"
   end
 
-  def self.to_html(content)
-    content.html_safe if content
+  def self.htmlize(content)
+    content
   end
 
   def self.name

data/lib/mumukit/content_type/markdown.rb

@@ -43,8 +43,8 @@ module Mumukit::ContentType::Markdown
         .gsub('ム', mumuki_logo)
   end
 
-  def self.to_html(content)
-    replace_mu_logo(content).html_safe if content
+  def self.htmlize(content)
+    replace_mu_logo(content) if content
   end
 
   def self.name

data/lib/mumukit/content_type/sanitizer.rb

@@ -0,0 +1,30 @@
+require 'sanitize'
+
+module Mumukit::ContentType::Sanitizer
+  class << self
+    class_attribute :should_sanitize, :allowed_elements, :allowed_attributes
+
+    self.should_sanitize = false
+    self.allowed_elements = []
+    self.allowed_attributes = {
+        'a' => Sanitize::Config::RELAXED[:attributes]['a'] + ['target']
+    }
+
+    def sanitize(html)
+      return html unless should_sanitize?
+
+      Sanitize.fragment(html, sanitization_settings)
+    end
+
+    def sanitization_settings
+      Sanitize::Config.merge(Sanitize::Config::RELAXED, custom_sanitization_settings)
+    end
+
+    def custom_sanitization_settings
+      {
+          elements: Sanitize::Config::RELAXED[:elements] + allowed_elements,
+          attributes: allowed_attributes
+      }
+    end
+  end
+end

data/lib/mumukit/content_type/version.rb

@@ -1,5 +1,5 @@
 module Mumukit
   module ContentType
-    VERSION = '1.3.1'
+    VERSION = '1.4.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mumukit-content-type
 version: !ruby/object:Gem::Version
-  version: 1.3.1
+  version: 1.4.0
 platform: ruby
 authors:
 - Franco Leonardo Bulgarelli
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-04-19 00:00:00.000000000 Z
+date: 2018-10-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -94,6 +94,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: sanitize
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
 description: 
 email:
 - franco@mumuki.org
@@ -107,6 +121,7 @@ files:
 - lib/mumukit/content_type/html.rb
 - lib/mumukit/content_type/markdown.rb
 - lib/mumukit/content_type/plain.rb
+- lib/mumukit/content_type/sanitizer.rb
 - lib/mumukit/content_type/version.rb
 - lib/mumukit/content_type/with_markdown.rb
 - vendor/assets/images/emojis/-1.png
@@ -1012,7 +1027,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Content Type handling for Mumuki