poros 0.3.1 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 016c361abb81a9dfe8c7a338515754ded79a4fd70518ed23964765ec098bc5e5
-  data.tar.gz: 50679f5bdc6b51afb5e612aa7c93d9de67b469a05ad1baf971d694a5d157e478
+  metadata.gz: c7e3b46d74b70a0f801c765e6bc38fe972456e18085b27d409a58cc9753383b3
+  data.tar.gz: 540803ca53b42bbf081b0d3abb4d169625d5e9621dbfdd8d44b68b23c756e46c
 SHA512:
-  metadata.gz: 397fa97afdc11207acb52d695988bf8045b46dc84d37c938649625e50e8555893b03d755487615aaeb291cb0a2dc7b59ac4ca17629f3b42602f481023a01d815
-  data.tar.gz: 69a8f43db77401244d12ca66cb0a0d8f527309c335b0e38b6e41347764c8569942b9ffe662f96581dd1ae28b1b97d2dd73cc7b72ec5016ff97b8bf736beb5874
+  metadata.gz: 9abc0878efeae1d62cceff5d4ff677736342a36e5268ce2a58c6334d5ebe48ff605eda0bab95fd302168d328f4739074d31bf076d65a2821b1ba6a9d5380d7a0
+  data.tar.gz: 0a037b68fa58a9c25f09a5aff82c7edb290459a373ab06e1f19e152313091fac343117a11b5d012c43b28e3222e92ec7f3dca0fd094ca8d83c9c674dd74a7b15

data/.travis.yml

@@ -1,10 +1,14 @@
 sudo: false
 language: ruby
-rvm:
-  - 2.1.10
-  - 2.2.9
-  - 2.3.6
-  - 2.4.3
-  - 2.5.1
-  - ruby-head
-before_install: gem install bundler
+matrix:
+  include:
+    - rvm: 2.1
+      gemfile: bundler1.gemfile
+    - rvm: 2.2
+      gemfile: bundler1.gemfile
+    - rvm: 2.3
+    - rvm: 2.4
+    - rvm: 2.5
+    - rvm: 2.6
+    - rvm: 2.7
+    - rvm: ruby-head

data/README.md

@@ -48,6 +48,28 @@ other_widget = Widget.find('uuid')
 many_widgets = Widget.where(order: 1, name: /regex/)
 ```
 
+If you want to use an attribute that's actually a class like `Date` you will
+need to specifically allow it. This is a safety feature of YAML and will help
+protect your code base from malicious users.
+
+```ruby
+
+Poros::Config.configure do |config|
+  config[:permitted_classes] << Date
+end
+
+class Person
+  include Poros
+
+  poro_attr :name, :birthday
+
+  def initialize(name: '', birthday: Date.today)
+    @name = name
+    @birthday = birthday
+  end
+end
+```
+
 `#initialize` must use keyword arguments and contain at least all the
 attributes defined in `poro_attr`. In the future I may define this function for
 you but for right now I'm not sure I want to go that direction.
@@ -58,9 +80,9 @@ you but for right now I'm not sure I want to go that direction.
 speed up searching but if your index gets really big the initial load of a
 model will take quite a long time.
 
-`self.data_directory` you can re-define this method if you don't want it to
-save to the default of `./db/#{self}`. If you do re-define it you _must_
-seperate each model into it's own folder or it will have _lots_ of issues.
+`self.data_directory` you can redefine this method if you don't want it to
+save to the default of `./db/#{self}`. If you do redefine it you _must_
+seperate each model into its own folder or it will have _lots_ of issues.
 
 `.where` acts a bit like ActiveRecord and it takes exact matches, regexs, arrays, or
 lambdas in any combination.

data/bundler1.gemfile

@@ -0,0 +1,7 @@
+source "https://rubygems.org"
+
+git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }
+
+gem "bundler", "~> 1.0"
+gem "rake"
+gem "minitest", "~> 5.0"

data/lib/poros/class_methods.rb

@@ -25,10 +25,13 @@ module Poros
     end
 
     def find(uuid)
-      attrs = YAML.load(File.read(file_path(uuid)))
+      attrs = YAML.safe_load(
+        File.read(file_path(uuid)),
+        permitted_classes: Poros::Config.configuration[:permitted_classes],
+      )
       attrs.delete(:uuid)
 
-      object = new(attrs)
+      object = new(**attrs)
       object.uuid = uuid
       object
     end
@@ -53,7 +56,10 @@ module Poros
     def all
       Dir.glob(File.join(data_directory, '*.yml')).map { |file|
         next if file == index_file
-        data = YAML.load(File.read(file))
+        data = YAML.safe_load(
+          File.read(file),
+          permitted_classes: Poros::Config.configuration[:permitted_classes],
+        )
         find(data[:uuid])
       }.compact
     end
@@ -65,7 +71,12 @@ module Poros
     def index_data
       return @index_data if defined? @index_data
 
-      data = File.exist?(index_file) ? YAML.load(File.read(index_file)) : {}
+      data = File.exist?(index_file) ?
+        YAML.safe_load(
+          File.read(index_file),
+          permitted_classes: Poros::Config.configuration[:permitted_classes],
+        ) : {}
+
       # Make sure we always have every index as a key
       poro_indexes.each do |index|
         data[index] = {} unless data.has_key?(index)

data/lib/poros/config.rb

@@ -0,0 +1,13 @@
+module Poros
+  module Config
+    def self.configuration
+      @configuration ||= {
+        permitted_classes: [Symbol],
+      }
+    end
+
+    def self.configure
+      yield(configuration)
+    end
+  end
+end

data/lib/poros/query.rb

@@ -41,7 +41,10 @@ module Poros
       if table_scan.size > 0
         scanned_results = Dir.glob(File.join(@object.data_directory, '*.yml')).map { |file|
           next if file == @object.index_file
-          data = YAML.load(File.read(file))
+          data = YAML.safe_load(
+            File.read(file),
+            permitted_classes: Poros::Config.configuration[:permitted_classes],
+          )
           data[:uuid] if table_scan.all? { |key, value|
             case value
             when Regexp

data/lib/poros/version.rb

@@ -1,3 +1,3 @@
 module Poros
-  VERSION = "0.3.1"
+  VERSION = "0.5.0"
 end

data/lib/poros.rb

@@ -1,12 +1,16 @@
 require 'yaml'
 require 'securerandom'
 
+require 'poros/config'
+
 require 'poros/query'
 require 'poros/instance_methods'
 require 'poros/class_methods'
 require 'poros/relations'
 
 module Poros
+  include Poros::Config
+
   include Poros::InstanceMethods
   include Poros::ClassMethods
   include Poros::Relations

data/poros.gemspec

@@ -10,7 +10,7 @@ Gem::Specification.new do |spec|
   spec.summary       = 'Persist and query your objects'
   spec.description   = 'Persist your objects and query them in an active record like way'
   spec.authors       = ["Sean Ross Earle"]
-  spec.email         = ["sean.earle@oeQuacki.com"]
+  spec.email         = ["sean.r.earle@gmail.com"]
   spec.homepage      = "https://github.com/HellRok/Poros"
   spec.license       = "MIT"
 
@@ -21,7 +21,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_development_dependency "bundler", "~> 1.16"
-  spec.add_development_dependency "rake", "~> 10.0"
-  spec.add_development_dependency "minitest", "~> 5.0"
+  spec.add_development_dependency "bundler"
+  spec.add_development_dependency "rake"
+  spec.add_development_dependency "minitest"
 end

metadata

@@ -1,11 +1,10 @@
 --- !ruby/object:Gem::Specification
 name: poros
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.5.0
 platform: ruby
 authors:
 - Sean Ross Earle
-autorequire: 
 bindir: exe
 cert_chain: []
 date: 2018-04-22 00:00:00.000000000 Z
@@ -14,47 +13,47 @@ dependencies:
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.16'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.16'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '0'
 description: Persist your objects and query them in an active record like way
 email:
-- sean.earle@oeQuacki.com
+- sean.r.earle@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -65,8 +64,10 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- bundler1.gemfile
 - lib/poros.rb
 - lib/poros/class_methods.rb
+- lib/poros/config.rb
 - lib/poros/info.rb
 - lib/poros/instance_methods.rb
 - lib/poros/query.rb
@@ -77,7 +78,6 @@ homepage: https://github.com/HellRok/Poros
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -92,9 +92,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
-signing_key: 
+rubygems_version: 4.0.3
 specification_version: 4
 summary: Persist and query your objects
 test_files: []