repost 0.2.9 → 0.3.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c596318ae45ed6b77e768fc7eb3db94c21af30e4f92878421ac984ea7da664ee
-  data.tar.gz: 990b52812aa4e79247eaf99180535925cd4cf9cbd9a962fdcba96afb8693b47e
+  metadata.gz: b3f86c0a5b05ecd0335c0a471d9bfb6bc838c290c2cfbab6f1d2c4e411c60a5c
+  data.tar.gz: 9f2e280d22ee448a6f99e30fe410e576af78c96966877d0be90df7e441ae53ac
 SHA512:
-  metadata.gz: 761da6f4e436e85a1dc62c8446010a8465a18e7584df595b19176b85624a1459a38cda391b7aee2363b26509bcfbd04c15468bd7e0c832edb960d730b0d0d2c5
-  data.tar.gz: ed1c4a2c9350388846f9bafac08aac3439f98fa2802a69d6dc92e53d8a16b463d1823ffd57eee2bee0242f21e4a1818149139689031d91388cadbe666e09584c
+  metadata.gz: 45d255fb124026befb181c204c7914b260f5f9cfbc1f149072d5063e70e89d3e26d20861fd410a437edec30adc3d8e1066ff7149a3ac63c78b731cb9d958f9c2
+  data.tar.gz: ab0c1712df4aabf366ebf02c0067459d5102db5231ca06b5b96af72735dadc4b6ceed8ca525b04788a5593ed8124e0c943baccc60f959dbaff68eaef353e1b6f

data/lib/repost/extend_controller.rb

@@ -1,16 +1,22 @@
-if defined?(Rails)
-  class ::ActionController::Base
+if defined?(Rails) && defined?(ActiveSupport)
+  ActiveSupport.on_load(:action_controller) do
+    class ::ActionController::Base
 
-    def repost(url, params: {}, options: {})
-      render html: Repost::Senpai.perform(
-        url,
-        params: params,
-        options: options.reverse_merge(authenticity_token: form_authenticity_token)
-      ).html_safe
-    end
+      def repost(url, params: {}, options: {})
+        authenticity_token = form_authenticity_token if ['auto', :auto].include?(options[:authenticity_token])
+        render html: Repost::Senpai.perform(
+          url,
+          params: params,
+          options: options.merge({
+            authenticity_token: authenticity_token,
+            autosubmit_nonce: content_security_policy_nonce,
+          }.compact)
+        ).html_safe
+      end
 
-    alias :redirect_post :repost
+      alias :redirect_post :repost
 
+    end
   end
 end
 

data/lib/repost/senpai.rb

@@ -12,6 +12,7 @@ module Repost
       @charset            = options.fetch(:charset, DEFAULT_CHARSET)
       @form_id            = options.fetch(:form_id, generated_form_id)
       @autosubmit         = options.fetch(:autosubmit, true)
+      @autosubmit_nonce   = options.fetch(:autosubmit_nonce, nil)
       @section_classes    = options.dig(:decor, :section, :classes)
       @section_html       = options.dig(:decor, :section, :html)
       @submit_classes     = options.dig(:decor, :submit, :classes)
@@ -31,7 +32,7 @@ module Repost
 
     attr_reader :url, :params, :options, :method, :form_id, :autosubmit,
                 :section_classes, :section_html, :submit_classes,
-                :submit_text, :authenticity_token, :charset
+                :submit_text, :authenticity_token, :charset, :autosubmit_nonce
 
     def form_head
       "<form id='#{form_id}' action='#{url}' method='#{method}' accept-charset='#{charset}'>"
@@ -39,12 +40,22 @@ module Repost
 
     def form_body
       inputs = params.map do |key, value|
-        "<input type='hidden' name='#{key}' value='#{value}'>"
+        form_input(key, value)
       end
       inputs.unshift(csrf_token) if authenticity_token
       inputs.join
     end
 
+    def form_input(key, value)
+      if value.is_a?(Hash)
+        value.map do |inner_key, inner_value|
+          form_input("#{key}[#{inner_key}]", inner_value)
+        end.join
+      else
+        "<input type='hidden' name='#{key}' value='#{value}'>"
+      end
+    end
+
     def form_footer
       "</form>"
     end
@@ -71,7 +82,8 @@ module Repost
     end
 
     def auto_submit_script
-      "<script>
+      nonce_attr = %Q( nonce="#{autosubmit_nonce}") if autosubmit_nonce
+      "<script#{nonce_attr}>
         document.getElementById('#{form_id}').submit();
       </script>"
     end

data/lib/repost/version.rb

@@ -1,3 +1,3 @@
 module Repost
-  VERSION = "0.2.9"
+  VERSION = "0.3.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: repost
 version: !ruby/object:Gem::Version
-  version: 0.2.9
+  version: 0.3.4
 platform: ruby
 authors:
 - YaroslavO
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-08-14 00:00:00.000000000 Z
+date: 2020-11-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -86,7 +86,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.0.8
 signing_key: 
 specification_version: 4
 summary: Gem implements Redirect using POST method