rails_cloudflare_turnstile 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72dc292372557cd074ad5849a4bd3de12b55d56d53b14a57ca248f9e406bf17a
-  data.tar.gz: 2b6b02151805b3e04a0970e8cfc0ed8d6231fb006547c17e8353c21a66b87f23
+  metadata.gz: 671ea3b114a69c80454ee276c0c8136f86c03bb004999cc99008ebd1ee225402
+  data.tar.gz: a2fca23ab298a5457e0a12817e9f32f838fbeec15b978a534aa864dee081c882
 SHA512:
-  metadata.gz: d6f8af28dd1ae7581d2a47124e81fd9a34e2a168d3b6cd8dfaf1f19bce732b57e8e0b86b637cc39023ba66a81c16757076842f3989f5bfe05f1a4f228f2e27f7
-  data.tar.gz: c4d387d37d0c0a2c01a30da6c5e85566517b7c14f12eb753513b32fa97d3dfd3f80408e3b1749f5cd82629e4d524ee5a07985ff0436dbce98467ffa4d5239b7d
+  metadata.gz: b3b46461d813e8021b3df1104c1da0b1151618be3065b72d30072e44c20ac22b427dec51568cb223d54ceff266199fd03f61ea52685f5cdb605d2a6b951aadc9
+  data.tar.gz: a8af33cd2746c38eac2987069fff8e04e6d02a25415f512a72685c8b16955cc02cd96ae5f9bcbb8a1003934cdb5160ca00a1de635cd686172119195db4f41c53

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 ChangeLog
 =========
 
+0.2.2
+-----
+- Resolve CVE-2025-27111
+- Fix broken unit tests and update method documentation.
+- Fix standardrb linting error.
+
+0.2.1
+-----
+- Add support for passing arbitary keyword arguments to the underlying `content_tag` from the `cloudflare_turnstile` helper
+
 0.2.0
 -----
 - drop support for Ruby 2.7

data/README.md

@@ -38,14 +38,14 @@ To totally disable Turnstile, you can set `c.enabled = false` and all other conf
 To use Turnstile for a view:
 
    1. Call `cloudflare_turnstile_script_tag` in your layout
-   2. Call `cloudflare_turnstile` in your form View
+   2. Call `cloudflare_turnstile` in your form View. Keyword arguments are passed to the tag helper (for example, to set the `tabindex` option, you could use `cloudflare_turnstile(data: {tabindex: 0})`)
    3. Call `validate_cloudflare_turnstile` as a `before_action` in your controller.
 
 If the challenge fails, the exception `RailsCloudflareTurnstile::Forbidden` will be raised; you should handle this with
 a `rescue_from` block.
 
 By default, in development and test mode, a special mock view will be inserted if real credentials are not present. To
-disable this, set the `mock_enable` property of the configuration to false.
+disable this, set the `mock_enabled` property of the configuration to false.
 
 ## License
 The gem is available as open source under the terms of the [ISC License](LICENSE.txt).

data/lib/rails_cloudflare_turnstile/configuration.rb

@@ -16,7 +16,7 @@ module RailsCloudflareTurnstile
     # Timeout for operations with Cloudflare
     attr_accessor :timeout
 
-    # size for the widget (:regular or :compact)
+    # size for the widget (:regular, :compact, or :flexible)
     attr_accessor :size
 
     # theme for the widget (:auto, :light, or :dark)
@@ -42,7 +42,7 @@ module RailsCloudflareTurnstile
       raise "Must set site key" if @site_key.nil?
       raise "Must set secret key" if @secret_key.nil?
       @size = @size.to_sym
-      raise "Size must be one of ':regular' or ':compact'" unless [:regular, :compact].include? @size
+      raise "Size must be one of ':regular', ':compact' or ':flexible'" unless [:regular, :compact, :flexible].include? @size
       raise "Theme must be one of :auto, :light, or :dark" unless [:auto, :light, :dark].include? @theme
     end
 

data/lib/rails_cloudflare_turnstile/version.rb

@@ -1,3 +1,3 @@
 module RailsCloudflareTurnstile
-  VERSION = "0.2.0"
+  VERSION = "0.2.2"
 end

data/lib/rails_cloudflare_turnstile/view_helpers.rb

@@ -2,25 +2,25 @@
 
 module RailsCloudflareTurnstile
   module ViewHelpers
-    def cloudflare_turnstile(action: "other", data_callback: nil)
+    def cloudflare_turnstile(action: "other", data_callback: nil, **html_options)
       if RailsCloudflareTurnstile.enabled?
         content_tag(:div, class: "cloudflare-turnstile") do
-          concat turnstile_div(action, data_callback: data_callback)
+          concat turnstile_div(action, data_callback: data_callback, **html_options)
         end
       elsif RailsCloudflareTurnstile.mock_enabled?
         content_tag(:div, class: "cloudflare-turnstile") do
-          concat mock_turnstile_div(action, data_callback: data_callback)
+          concat mock_turnstile_div(action, data_callback: data_callback, **html_options)
         end
       end
     end
 
     def cloudflare_turnstile_script_tag(async: true, defer: true)
       if RailsCloudflareTurnstile.enabled?
-        content_tag(:script, src: js_src, async: async, defer: defer) do
+        content_tag(:script, src: js_src, async: async, defer: defer, data: {turbo_track: "reload", turbo_temporary: true}) do
           ""
         end
       elsif RailsCloudflareTurnstile.mock_enabled?
-        content_tag(:script, src: mock_js, async: async, defer: defer) do
+        content_tag(:script, src: mock_js, async: async, defer: defer, data: {turbo_track: "reload", turbo_temporary: true}) do
           ""
         end
       end
@@ -28,15 +28,15 @@ module RailsCloudflareTurnstile
 
     private
 
-    def turnstile_div(action, data_callback: nil)
+    def turnstile_div(action, data_callback: nil, **html_options)
       config = RailsCloudflareTurnstile.configuration
-      content_tag(:div, :class => "cf-turnstile", "data-sitekey" => site_key, "data-size" => config.size, "data-action" => action, "data-callback" => data_callback, "data-theme" => config.theme) do
+      content_tag(:div, :class => "cf-turnstile", "data-sitekey" => site_key, "data-size" => config.size, "data-action" => action, "data-callback" => data_callback, "data-theme" => config.theme, **html_options) do
         ""
       end
     end
 
-    def mock_turnstile_div(action, data_callback: nil)
-      content_tag(:div, :class => "cf-turnstile", :style => "width: 300px; height: 65px; border: 1px solid gray; display: flex; flex-direction: row; justify-content: center; align-items: center; margin: 10px;", "data-callback" => data_callback) do
+    def mock_turnstile_div(action, data_callback: nil, **html_options)
+      content_tag(:div, :class => "cf-turnstile", :style => "width: 300px; height: 65px; border: 1px solid gray; display: flex; flex-direction: row; justify-content: center; align-items: center; margin: 10px;", "data-callback" => data_callback, **html_options) do
         [
           tag.input(type: "hidden", name: "cf-turnstile-response", value: "mocked"),
           image_tag("turnstile-logo.svg"),

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rails_cloudflare_turnstile
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - James Brown
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-08 00:00:00.000000000 Z
+date: 2025-03-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -19,7 +18,7 @@ dependencies:
         version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '8'
+        version: '9'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +28,7 @@ dependencies:
         version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '8'
+        version: '9'
 - !ruby/object:Gem::Dependency
   name: faraday
   requirement: !ruby/object:Gem::Requirement
@@ -79,7 +78,6 @@ metadata:
   homepage_uri: https://github.com/instrumentl/rails-cloudflare-turnstile
   source_code_uri: https://github.com/instrumentl/rails-cloudflare-turnstile
   changelog_uri: https://github.com/instrumentl/rails-cloudflare-turnstile/blob/main/CHANGELOG.md
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -94,8 +92,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key: 
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Rails extension for Cloudflare's Turnstile CAPTCHA alternative
 test_files: []