redcarpet-form-extension 0.4.0 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bdcc9a152b1f3f35842be0f782d6b57e258b3d87cd1872e9c4c9778b5be17292
-  data.tar.gz: 14d015cb5b3e54c2101d291649712d8b993f6bf0d416055f473e5bd31490634f
+  metadata.gz: fa6af9360550d02e92d521199c28855c43e3ba9bb10881b3466151f8bd6c9814
+  data.tar.gz: 85309724c2267a527bb6781100913e32f72f8b08068208052c0e9460917f8c13
 SHA512:
-  metadata.gz: dedcc3d33bce496a8b81e43b20c87bfd7920cb3d2717418b0b9e4cabc6808cdb575a777eb0a9c41497de1d4c6795c021d0b6af9acedc4f261fc682f29dab74fe
-  data.tar.gz: fe93d675a0fe895d9b8d3ced36f246b0d4a479b4b966d025864528a8e2e630dde8ed347b4f9f3b653ca83f785712043bb516de3ab08b97d8fac384c180441156
+  metadata.gz: 22b9f597070832253e276189d90b89a461b01d689f733232e71937e4b67d60ed5b70ac31c146f28a19db3fbdfeddc60368f9602d8376176d5b405d133e948c6d
+  data.tar.gz: 90790e3d273bd5ad215e7fcf37c30340591240c48efed844025352f6035d627383d96e9314e30fc4222648416c74d17b1d9724a075dc83cdaa8b1423ece0d5c5

data/.devcontainer/Dockerfile

@@ -0,0 +1,3 @@
+# Make sure RUBY_VERSION matches the Ruby version in .ruby-version
+ARG RUBY_VERSION=4.0.6
+FROM ghcr.io/rails/devcontainer/images/ruby:${RUBY_VERSION}

data/.devcontainer/devcontainer.json

@@ -0,0 +1,21 @@
+{
+  "name": "redcarpet-form-extension",
+  "build": {
+    "dockerfile": "Dockerfile"
+  },
+
+  "runArgs": ["--name", "redcarpet-form-extension"],
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  "postCreateCommand": "bash -lc 'bin/setup'",
+  "postStartCommand": "bash -lc 'ruby -v && bundle -v'",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "Shopify.ruby-lsp",
+        "misogi.ruby-rubocop",
+        "GitHub.copilot",
+        "GitHub.copilot-chat"
+      ]
+    }
+  }
+}

data/.github/workflows/gem-push.yml

@@ -2,9 +2,9 @@ name: Ruby Gem
 
 on:
   push:
-    branches: [ "master" ]
+    branches: [ "develop" ]
   pull_request:
-    branches: [ "master" ]
+    branches: [ "develop" ]
 
 jobs:
   build:
@@ -19,7 +19,7 @@ jobs:
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
-        # ruby-version: 3.1.x # Not needed with a .ruby-version file
+        # ruby-version: 4.0.x # Not needed with a .ruby-version file
         bundler-cache: true # runs 'bundle install' and caches installed gems automatically
 
     - name: Run lint
@@ -28,6 +28,9 @@ jobs:
     - name: Run tests
       run: bundle exec rspec
 
+    - name: Run bundle-audit
+      run: bundle exec bundle-audit check --update
+
     - name: Publish to GPR
       if: false # always skip job
       run: |

data/.rubocop.yml

@@ -1,10 +1,10 @@
-require:
+plugins:
   - rubocop-rake
   - rubocop-rspec
 
 AllCops:
   DisplayCopNames: true
-  TargetRubyVersion: 3.1
+  TargetRubyVersion: 4.0
   NewCops: disable
   Exclude:
     - 'vendor/**/*'
@@ -13,7 +13,7 @@ AllCops:
     - '.git/**/*'
     - 'bin/*'
 
-Naming/PredicateName:
+Naming/PredicatePrefix:
   # Method define macros for dynamically generated method.
   MethodDefinitionMacros:
     - define_method

data/.ruby-version

@@ -1 +1 @@
-3.2.2
+4.0.6

data/Gemfile

@@ -5,7 +5,7 @@ source 'https://rubygems.org'
 # Specify your gem's dependencies in redcarpet-form-extension.gemspec
 gemspec
 
-gem 'rake', '~> 12.0'
+gem 'rake', '~> 13.0'
 
 # Behaviour Driven Development for Ruby
 gem 'rspec'
@@ -27,3 +27,10 @@ gem 'simplecov', require: false, group: :test
 
 # A gem to bump versions of gems and chef-cookbooks.
 gem 'bump'
+
+# Security scanners
+gem 'bundler-audit', require: false
+
+# stdlib gems no longer default in Ruby 3.4+
+gem 'base64'
+gem 'ostruct'

data/Gemfile.lock

@@ -1,71 +1,103 @@
 PATH
   remote: .
   specs:
-    redcarpet-form-extension (0.4.0)
-      redcarpet (~> 3.6.0)
+    redcarpet-form-extension (1.0.0)
+      loofah (~> 2.25.0)
+      redcarpet (~> 3.6.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    ast (2.4.2)
+    ast (2.4.3)
+    base64 (0.3.0)
     bump (0.10.0)
-    byebug (11.1.3)
-    diff-lcs (1.5.0)
-    docile (1.4.0)
-    parallel (1.22.1)
-    parser (3.1.2.0)
+    bundler-audit (0.9.3)
+      bundler (>= 1.2.0)
+      thor (~> 1.0)
+    byebug (13.0.0)
+      reline (>= 0.6.0)
+    crass (1.0.7)
+    diff-lcs (1.6.2)
+    io-console (0.8.2)
+    json (2.21.2)
+    language_server-protocol (3.17.0.6)
+    lint_roller (1.1.0)
+    loofah (2.25.2)
+      crass (~> 1.0.2)
+      nokogiri (>= 1.12.0)
+    nokogiri (1.19.4-aarch64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.4-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.4-x86_64-linux-gnu)
+      racc (~> 1.4)
+    ostruct (0.6.3)
+    parallel (2.1.0)
+    parser (3.3.12.0)
       ast (~> 2.4.1)
+      racc
+    prism (1.9.0)
+    racc (1.8.1)
     rainbow (3.1.1)
-    rake (12.3.3)
-    redcarpet (3.6.0)
-    regexp_parser (2.5.0)
-    rexml (3.2.5)
-    rspec (3.11.0)
-      rspec-core (~> 3.11.0)
-      rspec-expectations (~> 3.11.0)
-      rspec-mocks (~> 3.11.0)
-    rspec-core (3.11.0)
-      rspec-support (~> 3.11.0)
-    rspec-expectations (3.11.0)
+    rake (13.4.2)
+    redcarpet (3.6.1)
+    regexp_parser (2.12.0)
+    reline (0.6.3)
+      io-console (~> 0.5)
+    rspec (3.13.2)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.6)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.11.0)
-    rspec-mocks (3.11.1)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.8)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.11.0)
-    rspec-support (3.11.0)
-    rubocop (1.30.1)
-      parallel (~> 1.10)
-      parser (>= 3.1.0.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.7)
+    rubocop (1.89.0)
+      json (~> 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
-      rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.18.0, < 2.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.18.0)
-      parser (>= 3.1.1.0)
-    rubocop-rake (0.6.0)
-      rubocop (~> 1.0)
-    rubocop-rspec (2.11.1)
-      rubocop (~> 1.19)
-    ruby-progressbar (1.11.0)
-    simplecov (0.21.2)
-      docile (~> 1.1)
-      simplecov-html (~> 0.11)
-      simplecov_json_formatter (~> 0.1)
-    simplecov-html (0.12.3)
-    simplecov_json_formatter (0.1.4)
-    unicode-display_width (2.1.0)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.50.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
+    rubocop-rake (0.7.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-rspec (3.10.2)
+      lint_roller (~> 1.1)
+      regexp_parser (>= 2.0)
+      rubocop (~> 1.86, >= 1.86.2)
+    ruby-progressbar (1.13.0)
+    simplecov (1.0.3)
+    thor (1.5.0)
+    unicode-display_width (3.2.0)
+      unicode-emoji (~> 4.1)
+    unicode-emoji (4.2.0)
 
 PLATFORMS
+  aarch64-linux
   x86_64-darwin-20
   x86_64-darwin-22
   x86_64-linux
 
 DEPENDENCIES
+  base64
   bump
+  bundler-audit
   byebug
-  rake (~> 12.0)
+  ostruct
+  rake (~> 13.0)
   redcarpet-form-extension!
   rspec
   rubocop
@@ -74,4 +106,4 @@ DEPENDENCIES
   simplecov
 
 BUNDLED WITH
-   2.5.4
+   2.6.7

data/README.md

@@ -104,6 +104,26 @@ The HTML result is:
 
 After checking out the repo, run `bin/setup` to install dependencies. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
 
+### VS Code Dev Container
+
+This repository includes a dev container configuration in `.devcontainer/` using Ruby 4.0.6.
+
+1. Open the project in VS Code.
+2. Run **Dev Containers: Reopen in Container** from the Command Palette.
+3. Wait for the container build to complete. The `postCreateCommand` runs `bin/setup` automatically.
+4. On container start, `postStartCommand` verifies the environment with `ruby -v && bundle -v`.
+5. Recommended extensions are installed for this workspace: `Shopify.ruby-lsp`, `misogi.ruby-rubocop`, `GitHub.copilot`, and `GitHub.copilot-chat`.
+6. Run tests and linting inside the container:
+
+```bash
+bundle exec rspec
+bundle exec rubocop
+bundle exec bundle-audit check --update
+bundle exec rake
+```
+
+If you change `.devcontainer/devcontainer.json` or `.devcontainer/Dockerfile`, rebuild with **Dev Containers: Rebuild Container**.
+
 To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
 ## Contributing

data/lib/redcarpet/form/extension/render/html.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'loofah'
+
 require_relative '../block/checkboxes'
 require_relative '../block/radio_buttons'
 require_relative '../block/textarea'
@@ -16,6 +18,12 @@ module Redcarpet
             process_custom_tags(text.strip)
           end
 
+          def postprocess(document)
+            # Removes unknown/unsafe tags and their children
+            # https://github.com/flavorjones/loofah?tab=readme-ov-file#built-in-html-scrubbers
+            Loofah.fragment(document).scrub!(:prune).to_s
+          end
+
           private
 
           # Processes custom tags (inline tags and block tags)

data/lib/redcarpet/form/extension/version.rb

@@ -3,7 +3,7 @@
 module Redcarpet
   module Form
     module Extension
-      VERSION = '0.4.0'
+      VERSION = '2.0.0'
     end
   end
 end

data/redcarpet-form-extension.gemspec

@@ -12,7 +12,7 @@ Gem::Specification.new do |spec|
   spec.description   = 'A Redcarpet extension with a custom HTML render to handle custom Markdown rules for tags like inputs and textareas'
   spec.homepage      = 'https://github.com/SofiaSousa/redcarpet-form-extension'
   spec.license       = 'MIT'
-  spec.required_ruby_version = Gem::Requirement.new('>= 3.1.0')
+  spec.required_ruby_version = Gem::Requirement.new('>= 4.0.0')
 
   # spec.metadata['allowed_push_host'] = "TODO: Set to 'http://mygemserver.com'"
 
@@ -29,5 +29,6 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'redcarpet', '~> 3.6.0'
+  spec.add_dependency 'loofah', '~> 2.25.0'
+  spec.add_dependency 'redcarpet', '~> 3.6.1'
 end

metadata

@@ -1,29 +1,42 @@
 --- !ruby/object:Gem::Specification
 name: redcarpet-form-extension
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 2.0.0
 platform: ruby
 authors:
 - Sofia Sousa
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-01-08 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: loofah
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.25.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.25.0
 - !ruby/object:Gem::Dependency
   name: redcarpet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
 description: A Redcarpet extension with a custom HTML render to handle custom Markdown
   rules for tags like inputs and textareas
 email:
@@ -32,6 +45,8 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".devcontainer/Dockerfile"
+- ".devcontainer/devcontainer.json"
 - ".github/workflows/gem-push.yml"
 - ".gitignore"
 - ".rspec"
@@ -62,7 +77,6 @@ metadata:
   homepage_uri: https://github.com/SofiaSousa/redcarpet-form-extension
   source_code_uri: https://github.com/SofiaSousa/redcarpet-form-extension
   changelog_uri: https://github.com/SofiaSousa/redcarpet-form-extension
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -70,15 +84,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.0
+      version: 4.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 4.0.16
 specification_version: 4
 summary: A Redcarpet extension with a custom HTML render to handle custom Markdown
   rules for tags like inputs and textareas