non_printable_sanitization 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5b7a8ede4f20506b182ffd0ea4e644696b3d0af2
-  data.tar.gz: ad10a975b8373a270120f0e4fbf4028ef0b7d1ea
+  metadata.gz: d65ef0806319671ff574e1b01b23482d4b061f2b
+  data.tar.gz: f80f508f1c7ce55c0e2bc37d7c9d6d8a0afddaf2
 SHA512:
-  metadata.gz: b82f3b091d69cac60f1076dbead447e4f914b4417500e87ef6b3ada62f844ab2226efc3aaf7383b4a1d1a372210c522252d9441a2fcaad8ad3f1929617c19d6a
-  data.tar.gz: 951ae6790bd61be9992980e59c96391b8fe730850ffca7da152db197aa1c26912ef7802a41a5e1c65948450e36f156cfe35f22818573d14b0e1a842908486c28
+  metadata.gz: 036832a873f736556e32b1897eff765e91ef5f2556b72683d56c3f75e73e4da39dc36615c279f59d045d534e91291436bec17d6402132bebbd2c18fd237dbcee
+  data.tar.gz: 5d824e55c4319e99a120cb3cf76f80b0adf094772dde7811e8e3d67b58950a3fc8f9fb07526909c08c2da8e5320745a55ccf63638499527a0e408e2395cd7240

data/lib/non_printable_sanitization.rb

@@ -1,6 +1,7 @@
 require 'rack'
 require 'rack/request'
 require 'stringio'
+require 'uri'
 require "non_printable_sanitization/version"
 
 class NonPrintableSanitization
@@ -25,11 +26,19 @@ class NonPrintableSanitization
 
   private
 
+  def is_url_encoded?(env)
+    content_type = env["CONTENT_TYPE"] || "none"
+    content_type.downcase.include?("urlencoded")
+  end
+
   def remove_non_printable_characters!(env)
     input = env["rack.input"].read
     
     if input && input.size > 0
+      url_encoded = is_url_encoded?(env)
+      input = ::URI.decode(input) if url_encoded
       input.gsub!(/[^[:print:]]/, "")
+      input = ::URI.encode(input) if url_encoded
       env["rack.input"] = StringIO.new(input)
     end
   ensure

data/lib/non_printable_sanitization/version.rb

@@ -1,3 +1,3 @@
 class NonPrintableSanitization
-  VERSION = "0.0.1"
+  VERSION = "0.0.2"
 end

data/spec/non_printable_sanitization_spec.rb

@@ -37,6 +37,15 @@ describe ::NonPrintableSanitization do
       end
     end
 
+    context "with URL encoded content" do
+      let(:post_data) { "derp%20derp%20derp%00" }
+      let(:content_type) { "application/x-www-form-urlencoded" }
+
+      it "sanitizes the non-printable \0" do
+        expect(app.request_body).to eq("derp%20derp%20derp")
+      end
+    end
+
     context "with multipart/form-data content" do
       let(:post_data) { "derp derp derp\0" }
       let(:content_type) { "multipart/form-data" }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: non_printable_sanitization
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Brandon Dewitt
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-07-06 00:00:00.000000000 Z
+date: 2014-07-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack