redcarpet-form-extension 0.4.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bdcc9a152b1f3f35842be0f782d6b57e258b3d87cd1872e9c4c9778b5be17292
-  data.tar.gz: 14d015cb5b3e54c2101d291649712d8b993f6bf0d416055f473e5bd31490634f
+  metadata.gz: fc3a65c2dd392f454b4614c568eceed646a7f7a396ff0f896685775ea58613c4
+  data.tar.gz: fc3f082662b41d85f843ac1ee204aeb5bb5c1af4bee760e84f3f130d4b5c7609
 SHA512:
-  metadata.gz: dedcc3d33bce496a8b81e43b20c87bfd7920cb3d2717418b0b9e4cabc6808cdb575a777eb0a9c41497de1d4c6795c021d0b6af9acedc4f261fc682f29dab74fe
-  data.tar.gz: fe93d675a0fe895d9b8d3ced36f246b0d4a479b4b966d025864528a8e2e630dde8ed347b4f9f3b653ca83f785712043bb516de3ab08b97d8fac384c180441156
+  metadata.gz: ffed0adb7e418fa9f330c5b63fe4fdac59150a65eb00476449000ff974332f91d40a008b15f2a5d5ebcd1bb7fdcc7224e5c6bbe8d20e44e0f7f1477a04e5cf73
+  data.tar.gz: 29f0d3a7489faf3d1918deb3259a6faebb12679425b74190e5e9ca6678af4822c1a4ab7a27fb26ea646100e3653e26d3af162dc6229c8e6f21a6d2ac29341960

data/.ruby-version

@@ -1 +1 @@
-3.2.2
+3.4.2

data/Gemfile.lock

@@ -1,8 +1,9 @@
 PATH
   remote: .
   specs:
-    redcarpet-form-extension (0.4.0)
-      redcarpet (~> 3.6.0)
+    redcarpet-form-extension (1.0.0)
+      loofah (~> 2.24.0)
+      redcarpet (~> 3.6.1)
 
 GEM
   remote: https://rubygems.org/
@@ -10,14 +11,23 @@ GEM
     ast (2.4.2)
     bump (0.10.0)
     byebug (11.1.3)
+    crass (1.0.6)
     diff-lcs (1.5.0)
     docile (1.4.0)
+    loofah (2.24.0)
+      crass (~> 1.0.2)
+      nokogiri (>= 1.12.0)
+    nokogiri (1.18.7-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.18.7-x86_64-linux-gnu)
+      racc (~> 1.4)
     parallel (1.22.1)
     parser (3.1.2.0)
       ast (~> 2.4.1)
+    racc (1.8.1)
     rainbow (3.1.1)
     rake (12.3.3)
-    redcarpet (3.6.0)
+    redcarpet (3.6.1)
     regexp_parser (2.5.0)
     rexml (3.2.5)
     rspec (3.11.0)
@@ -74,4 +84,4 @@ DEPENDENCIES
   simplecov
 
 BUNDLED WITH
-   2.5.4
+   2.6.7

data/README.md

@@ -106,6 +106,12 @@ After checking out the repo, run `bin/setup` to install dependencies. You can al
 
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
+bundle exec bump patch --tag
+
+gem build redcarpet-form-extension.gemspec
+
+gem push redcarpet-form-extension-0.4.0.gem
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/SofiaSousa/redcarpet-form-extension. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [code of conduct](https://github.com/SofiaSousa/redcarpet-form-extension/blob/master/CODE_OF_CONDUCT.md).

data/lib/redcarpet/form/extension/render/html.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'loofah'
+
 require_relative '../block/checkboxes'
 require_relative '../block/radio_buttons'
 require_relative '../block/textarea'
@@ -16,6 +18,12 @@ module Redcarpet
             process_custom_tags(text.strip)
           end
 
+          def postprocess(document)
+            # Removes unknown/unsafe tags and their children
+            # https://github.com/flavorjones/loofah?tab=readme-ov-file#built-in-html-scrubbers
+            Loofah.fragment(document).scrub!(:prune).to_s
+          end
+
           private
 
           # Processes custom tags (inline tags and block tags)

data/lib/redcarpet/form/extension/version.rb

@@ -3,7 +3,7 @@
 module Redcarpet
   module Form
     module Extension
-      VERSION = '0.4.0'
+      VERSION = '1.0.0'
     end
   end
 end

data/redcarpet-form-extension.gemspec

@@ -29,5 +29,6 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'redcarpet', '~> 3.6.0'
+  spec.add_dependency 'loofah', '~> 2.24.0'
+  spec.add_dependency 'redcarpet', '~> 3.6.1'
 end

metadata

@@ -1,29 +1,42 @@
 --- !ruby/object:Gem::Specification
 name: redcarpet-form-extension
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Sofia Sousa
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-01-08 00:00:00.000000000 Z
+date: 2025-04-08 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: loofah
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.24.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.24.0
 - !ruby/object:Gem::Dependency
   name: redcarpet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
 description: A Redcarpet extension with a custom HTML render to handle custom Markdown
   rules for tags like inputs and textareas
 email:
@@ -62,7 +75,6 @@ metadata:
   homepage_uri: https://github.com/SofiaSousa/redcarpet-form-extension
   source_code_uri: https://github.com/SofiaSousa/redcarpet-form-extension
   changelog_uri: https://github.com/SofiaSousa/redcarpet-form-extension
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -77,8 +89,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: A Redcarpet extension with a custom HTML render to handle custom Markdown
   rules for tags like inputs and textareas