rack-cleancookies 0.1.0

data/lib/rack.rb

@@ -0,0 +1 @@
+require 'rack/cleancookies'

data/lib/rack/cleancookies.rb

@@ -0,0 +1,58 @@
+# Rack middleware that drops non properly encoded cookies that would hurt the ActionDispatch::Cookies middleware.
+#
+# This is actually a hotfix for issues
+# * https://github.com/rack/rack/issues/225
+# * https://github.com/rails/rails/issues/2622
+module Rack
+  module CleanCookies
+    # Tests whether a string may be decoded as a form component
+    def decodable?(string)
+      URI.decode_www_form_component(string)
+      true
+    rescue ArgumentError => e
+      /^invalid %-encoding \(.*\)$/.match(e.message) ? false : raise
+    end
+
+    module_function :decodable?
+
+    # Tests whether a cookie is clean, that is its key and value may be decoded as a form components
+    def clean?(cookie)
+      key, value = cookie.split('=', 2)
+      decodable?(key) && decodable?(value)
+    end
+
+    module_function :clean?
+
+    class Middleware
+      def initialize(app)
+        @app = app
+      end
+
+      def call(env)
+        if env['HTTP_COOKIE']
+          clean_cookies, dirty_cookies = [], []
+
+          # Split cookies into clean and dirty
+          env['HTTP_COOKIE'].split(/[;,] */n).each do |cookie|
+            if CleanCookies::clean?(cookie)
+              clean_cookies << cookie
+            else
+              dirty_cookies << cookie
+            end
+          end
+
+          # Keep only clean cookies
+          env['HTTP_COOKIE'] = clean_cookies.join('; ')
+
+          # Inform about dropped dirty cookies
+          unless dirty_cookies.empty?
+            env['rack.errors'].puts "Ignoring dirty cookies: #{dirty_cookies.inspect}"
+          end
+        end
+
+        # Carry on
+        @app.call(env)
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,94 @@
+--- !ruby/object:Gem::Specification
+name: rack-cleancookies
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Moreno Carullo
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-07-23 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: test-unit
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/rack.rb
+- lib/rack/cleancookies.rb
+homepage: https://github.com/morenocarullo/rack-cleancookies
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: Clean dirty cookies from Rack environment
+test_files: []