rack-utf8_sanitizer 1.2.1 → 1.2.2

checksums.yaml

@@ -1,7 +1,15 @@
 ---
-SHA1:
-  metadata.gz: be92627f205eac2e80ab554ad5add8ca2a084026
-  data.tar.gz: 5325281ed65e1e17d74cabbb75df877e0387e2e8
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    NzExYTVlMDA4NWYyMTdiMTUzYjVlMjk1N2NjZGRiODQ1NWQ5ZTJmNA==
+  data.tar.gz: !binary |-
+    MGZjMzRmYTVhZmYwNWMzNGM3YzcyOGMyMzRlMjcyODgyMTE3MmM2Ng==
 SHA512:
-  metadata.gz: a3cc3842501b3c7e7bd4da92ae81432a6b6d014ab4af8a828a4269d781554fdb774e6c7fe3dd19ea582d959ea8d3093abc1984882587aede7084bf6e3381c10c
-  data.tar.gz: 108c557d20ce9c4716ae5d89fcd2878b8eb6ef3cd8a359d3e240a2cef575ef9a69a9cd129f8ab00bbde5628badb5f4d7f3f374badcaa04693162fa2f40531ac0
+  metadata.gz: !binary |-
+    Y2JiOWI0YjJhN2RkZDhkZGYwMjI5NWQyNDA1OThjOGIwNmY3Nzc3NGUzNTM2
+    Mjk1YzlhZjI5NTUwZjhjYWQ3OTNjNGY1YjA2OTc5NTYwODY5MDk0MjMwM2Yy
+    NDIyZGUwYTYzNTdhMDBjZmEyMjQxNTYzMzQwYzBmMTI2NzIxZTY=
+  data.tar.gz: !binary |-
+    NmNlYjBkODg3NzMyZmViYzkwZDg5OWFhNWY0M2UxZmY2YjJiYWY2ZjdiNWE2
+    OTkxMDNlMDg0OTQxMzZhNTg0NWM0YmMwYzUwN2Q4MmI1YzVjNzNiNzI5YmI0
+    NWYyY2M0MTQxZmRjYjAzNjY3ZmQ5ZjI3N2QxZTZkMjRlNWE5NzY=

data/CHANGELOG.md

@@ -0,0 +1,24 @@
+Changelog
+=========
+
+Master
+-------------------------
+
+API modifications:
+
+Features implemented:
+
+Bugs fixed:
+
+v1.2.2 (2014-07-10)
+-------------------------
+
+Features implemented:
+  * Sanitize request body for all HTTP verbs. (Nathaniel Talbott, #15)
+  * Add `application/json` and `text/javascript` as sanitizable content types. (Benjamin Fleischer, #12)
+
+Bugs fixed:
+  * Ensure Rack::UTF8 Sanitizer is first middleware. (Aaron Renner, #13)
+
+v1.2.1 (2014-05-27)
+-------------------------

data/README.md

@@ -19,7 +19,7 @@ Or install it yourself as:
 For Rails, add this to your `application.rb`:
 
 ``` ruby
-config.middleware.insert_before "Rack::Runtime", Rack::UTF8Sanitizer
+config.middleware.insert 0, Rack::UTF8Sanitizer
 ```
 
 For Rack apps, add this to `config.ru`:

data/lib/rack/utf8_sanitizer.rb

@@ -26,17 +26,12 @@ module Rack
     SANITIZABLE_CONTENT_TYPES = %w(
       text/plain
       application/x-www-form-urlencoded
+      application/json
+      text/javascript
     )
 
-    # MRI-optimization
-    POST = 'POST'
-    PUT  = 'PUT'
-
     def sanitize(env)
-      request_method = env['REQUEST_METHOD']
-      if request_method == POST || request_method == PUT
-        sanitize_rack_input(env)
-      end
+      sanitize_rack_input(env)
       env.each do |key, value|
         if URI_FIELDS.include?(key)
           env[key] = transfer_frozen(value,

data/rack-utf8_sanitizer.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |gem|
   gem.name          = "rack-utf8_sanitizer"
-  gem.version       = '1.2.1'
+  gem.version       = '1.2.2'
   gem.authors       = ["Peter Zotov"]
   gem.email         = ["whitequark@whitequark.org"]
   gem.description   = %{Rack::UTF8Sanitizer is a Rack middleware which cleans up } <<
@@ -21,4 +21,5 @@ Gem::Specification.new do |gem|
 
   gem.add_development_dependency "bacon"
   gem.add_development_dependency "bacon-colored_output"
+  gem.add_development_dependency "rake"
 end

data/test/test_utf8_sanitizer.rb

@@ -186,6 +186,17 @@ describe Rack::UTF8Sanitizer do
       end
     end
 
+    it "sanitizes StringIO rack.input on GET" do
+      input = "foo=bla&quux=bar"
+      @rack_input = StringIO.new input
+
+      sanitize_form_data(request_env.merge("REQUEST_METHOD" => "GET")) do |sanitized_input|
+        sanitized_input.encoding.should == Encoding::UTF_8
+        sanitized_input.should.be.valid_encoding
+        sanitized_input.should == input
+      end
+    end
+
     it "sanitizes StringIO rack.input with bad encoding" do
       input =  "foo=bla&quux=bar\xED"
       @rack_input = StringIO.new input

metadata

@@ -1,55 +1,69 @@
 --- !ruby/object:Gem::Specification
 name: rack-utf8_sanitizer
 version: !ruby/object:Gem::Version
-  version: 1.2.1
+  version: 1.2.2
 platform: ruby
 authors:
 - Peter Zotov
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-27 00:00:00.000000000 Z
+date: 2014-07-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: '1.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: '1.0'
 - !ruby/object:Gem::Dependency
   name: bacon
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: bacon-colored_output
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
 description: Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8
@@ -60,8 +74,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".gitignore"
-- ".travis.yml"
+- .gitignore
+- .travis.yml
+- CHANGELOG.md
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -78,12 +93,12 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ! '>='
     - !ruby/object:Gem::Version
       version: '1.9'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ! '>='
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []