qiita-markdown 0.19.1 → 0.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3eb75a91593610b1dd442a8d9acfc482e987ffc5
-  data.tar.gz: 8ec204270a2308ee5999c2b163e31c199c866e21
+  metadata.gz: da128a043af30b7150fe3a7cfd4e498206287f4f
+  data.tar.gz: f1c24db2c52521cb1929480e94ac6c1e710fb325
 SHA512:
-  metadata.gz: 61dc32d46b01408c08f07b480554ad346ef96ff629d68140c16592a5a77f90163fd5331fca5b4d206ad92aeff330bcb5d4b3e9ce4d8b9b9584329a8085e58a80
-  data.tar.gz: b5f84f32227113bfbb6a1b71f85f7a5fcd5e906dea4a177f9916ec533523bc9399f83d794f8a2f351b46fae64d03e82f47e950135d460db8ab71600758515bb6
+  metadata.gz: 26463d11cd37164156db324205e26e827bee86f060900641659d6ba106394552334408f82f896c2631ee6cc0ccb2b784d736ac57cfe0edf7a662155c2d73e7ef
+  data.tar.gz: feb783906656c3c7173ad19f3b92033d3e7fcdfe38d1d5842f22436cca6af693218ee372d7b2adb02a9a584759af513b62326f894d55ddc92f5325cc7ffd8725

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 ## Unreleased
 
+## 0.20.0
+
+- Allow `<blockquote class="twitter-tweet">`
+
 ## 0.19.1
 
 - Add missing sanitization for `<div>` class attribute

data/lib/qiita/markdown/filters/user_input_sanitizer.rb

@@ -10,6 +10,9 @@ module Qiita
               "rel" => %w[footnote url],
               "rev" => %w[footnote],
             },
+            "blockquote" => {
+              "class" => %w[twitter-tweet],
+            },
             "div" => {
               "class" => %w[footnotes],
             },
@@ -63,7 +66,7 @@ module Qiita
           ],
           attributes: {
             "a"          => %w[class href rel title],
-            "blockquote" => %w[cite],
+            "blockquote" => %w[cite class],
             "code"       => %w[data-metadata],
             "div"        => %w[class],
             "font"       => %w[color],

data/lib/qiita/markdown/version.rb

@@ -1,5 +1,5 @@
 module Qiita
   module Markdown
-    VERSION = "0.19.1"
+    VERSION = "0.20.0"
   end
 end

data/spec/qiita/markdown/processor_spec.rb

@@ -1125,6 +1125,28 @@ describe Qiita::Markdown::Processor do
         end
       end
 
+      context "with class attribute for <blockquote> tag" do
+        let(:markdown) do
+          <<-EOS.strip_heredoc
+            <blockquote class="twitter-tweet malicious-class">foo</blockquote>
+          EOS
+        end
+
+        if allowed
+          it "does not sanitize the classes" do
+            should eq <<-EOS.strip_heredoc
+              <blockquote class="twitter-tweet malicious-class">foo</blockquote>
+            EOS
+          end
+        else
+          it "sanitizes classes except `twitter-tweet`" do
+            should eq <<-EOS.strip_heredoc
+              <blockquote class="twitter-tweet">foo</blockquote>
+            EOS
+          end
+        end
+      end
+
       context "with class attribute for <div> tag" do
         let(:markdown) do
           <<-EOS.strip_heredoc

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: qiita-markdown
 version: !ruby/object:Gem::Version
-  version: 0.19.1
+  version: 0.20.0
 platform: ruby
 authors:
 - Ryo Nakamura
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-06-16 00:00:00.000000000 Z
+date: 2017-06-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gemoji