roda 2.19.0 → 2.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3b6466dae7413eb39adad4261800c4a31373bd59
-  data.tar.gz: e03a612cbbcc10f0745c7c5ac90dd60ba42d2608
+  metadata.gz: eef2a8e61f61ef63c53b1086d69a56ebfe6d8634
+  data.tar.gz: 9803c11eb51c8588d8ba7c8b8c9026045ee769f4
 SHA512:
-  metadata.gz: eed87278923a1e0c6c02bf903a42e3951bc2d4f3b7107f3a7e7898287abc374185cdb1fa4456392695bd8649cdc132f31764054dd911a4bd3b4cea24652259ac
-  data.tar.gz: 7d79e779afcbd05769a6568920ef5854c5ae9bfdeb9cf5947177efa73a08d1350d63f758ddb747e566991dfccd7df21a1e430b35872d9bae75692b1cd29a027a
+  metadata.gz: 82c6579b2995baf018e9115ce50dc32bb672cf9ecf7b26c82b895062e5cf86537ac2c07cd978936d64a5421989e332dfb24f2fea7fd45d07a8a5953b8eba93e6
+  data.tar.gz: c41e5dcc24f4dc2c5528556fb4c583f486e64eb7c04f988a9851d72e53ec99ea760782637084e9d83369db27a7cc3e83a37a3622e4c248654a639472ffdbc76c

data/CHANGELOG

@@ -1,3 +1,7 @@
+= 2.20.0 (2016-11-13)
+
+* Support :escape=>:erubi option in the render plugin to use the erubi template engine (jeremyevans)
+
 = 2.19.0 (2016-10-14)
 
 * Don't add Content-Type/Content-Length headers for 1xx, 204, 205, 304 statuses (celsworth, jeremyevans) (#101, #102)

data/README.rdoc

@@ -693,7 +693,8 @@ You can override the default rendering options by passing a hash to the plugin:
 
   class App < Roda
     plugin :render,
-      :escape => true,        # Automatically escape output in erb templates
+      :escape => true, # Automatically escape output in erb templates using Erubis
+                       # can use :erubi instead of true to use Erubi instead of Erubis
       :views => 'admin_views', # Default views directory
       :layout_opts => {:template=>'admin_layout',
                        :ext=>'html.erb'},    # Default layout template options
@@ -763,6 +764,8 @@ if you have helpers that already return escaped output using a
 string subclass instance.
 
 This support requires {Erubis}[http://www.kuwata-lab.com/erubis/].
+You can use <tt>:escape=>:erubi</tt> to use {Erubi}[https://github.com/jeremyevans/erubi],
+a simplified fork of Erubis.
 
 === Security Related HTTP Headers
 

data/doc/release_notes/2.20.0.txt

@@ -0,0 +1,5 @@
+= New Features
+
+* The render plugin now supports :erubi as an :escape option value,
+  which will change the plugin to use Erubi instead of Erubis as the
+  template processor.  Erubi is a simplified Erubis fork.

data/lib/roda/plugins/render.rb

@@ -58,10 +58,10 @@ class Roda
     #            templates, defaults to 'erb'.
     # :escape :: Use Roda's Erubis escaping support, which makes <tt><%= %></tt> escape output,
     #            <tt><%== %></tt> not escape output, and handles postfix conditions inside
-    #            <tt><%= %></tt> tags.
+    #            <tt><%= %></tt> tags.  Can have a value of :erubi to use Erubi escaping support.
     # :escape_safe_classes :: String subclasses that should not be HTML escaped when used in
-    #                         <tt><%= %></tt> tags, when :escape is used. Can be an array for multiple classes.
-    # :escaper :: Object used for escaping output of <tt><%= %></tt>, when :escape is used,
+    #                         <tt><%= %></tt> tags, when :escape=>true is used. Can be an array for multiple classes.
+    # :escaper :: Object used for escaping output of <tt><%= %></tt>, when :escape=>true is used,
     #             overriding the default.  If given, object should respond to +escape_xml+ with
     #             a single argument and return an output string.
     # :layout :: The base name of the layout file, defaults to 'layout'.  This can be provided as a hash
@@ -146,7 +146,7 @@ class Roda
       OPTS={}.freeze
 
       def self.load_dependencies(app, opts=OPTS)
-        if opts[:escape]
+        if opts[:escape] && opts[:escape] != :erubi
           app.plugin :_erubis_escaping
         end
       end
@@ -199,7 +199,10 @@ class Roda
         if RUBY_VERSION >= "1.9" && !template_opts.has_key?(:default_encoding)
           template_opts[:default_encoding] = Encoding.default_external
         end
-        if opts[:escape]
+        if opts[:escape] == :erubi
+          require 'tilt/erubi'
+          template_opts[:escape] = true
+        elsif opts[:escape]
           template_opts[:engine_class] = ErubisEscaping::Eruby
 
           opts[:escaper] ||= if opts[:escape_safe_classes]

data/lib/roda/version.rb

@@ -4,7 +4,7 @@ class Roda
   RodaMajorVersion = 2
 
   # The minor version of Roda, updated for new feature releases of Roda.
-  RodaMinorVersion = 19
+  RodaMinorVersion = 20
 
   # The patch version of Roda, updated only for bug fixes from the last
   # feature release.

data/spec/plugin/_erubis_escaping_spec.rb

@@ -9,15 +9,17 @@ begin
   rescue LoadError
     # Tilt 1 support
   end
-
-  if defined?(Tilt::ErubisTemplate) && ::Tilt['erb'] != Tilt::ErubisTemplate
-    # Work around error where erubis isn't set as erb template handler
-    Tilt.register(Tilt::ErubisTemplate, 'erb')
-  end
 rescue LoadError
   warn "tilt or erubis not installed, skipping _erubis_escaping plugin test"  
 else
 describe "_erubis_escaping plugin" do
+  before do
+    if defined?(Tilt::ErubisTemplate) && ::Tilt['erb'] != Tilt::ErubisTemplate
+      # Set erubis as default erb template handler
+      Tilt.register(Tilt::ErubisTemplate, 'erb')
+    end
+  end
+
   it "should escape inside <%= %> and not inside <%== %>, and handle postfix conditionals" do
     app(:bare) do
       plugin :render, :escape=>true

data/spec/plugin/render_spec.rb

@@ -549,3 +549,50 @@ describe "render plugin" do
 
 end
 end
+
+begin
+  require 'tilt'
+  require 'tilt/erubi'
+rescue LoadError
+  warn "tilt 2 or erubi not installed, skipping render :escape=>:erubi test"  
+else
+describe "_erubis_escaping plugin" do
+  before do
+    if defined?(Tilt::ErubiTemplate) && ::Tilt['erb'] != Tilt::ErubiTemplate
+      # Set erubi as default erb template handler
+      Tilt.register(Tilt::ErubiTemplate, 'erb')
+    end
+  end
+
+  it "should escape inside <%= %> and not inside <%== %>, and handle postfix conditionals" do
+    app(:bare) do
+      plugin :render, :escape=>:erubi
+
+      route do |r|
+        render(:inline=>'<%= "<>" %> <%== "<>" %><%= "<>" if false %>')
+      end
+    end
+
+    body.must_equal '&lt;&gt; <>'
+  end
+
+  it "should allow for per-branch escaping via set_view options" do
+    app(:bare) do
+      plugin :render, :escape=>:erubi
+      plugin :view_options
+
+      route do |r|
+        set_view_options :template_opts=>{:escape=>false}
+        r.is 'a' do
+          set_view_options :template_opts=>{:engine_class=>render_opts[:template_opts][:engine_class]}
+          render(:inline=>'<%= "<>" %>')
+        end
+        render(:inline=>'<%= "<>" %>')
+      end
+    end
+
+    body('/a').must_equal '&lt;&gt;'
+    body.must_equal '<>'
+  end
+end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: roda
 version: !ruby/object:Gem::Version
-  version: 2.19.0
+  version: 2.20.0
 platform: ruby
 authors:
 - Jeremy Evans
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-10-14 00:00:00.000000000 Z
+date: 2016-11-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -80,6 +80,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: erubi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: haml
   requirement: !ruby/object:Gem::Requirement
@@ -185,6 +199,7 @@ extra_rdoc_files:
 - doc/release_notes/2.17.0.txt
 - doc/release_notes/2.18.0.txt
 - doc/release_notes/2.19.0.txt
+- doc/release_notes/2.20.0.txt
 files:
 - CHANGELOG
 - MIT-LICENSE
@@ -208,6 +223,7 @@ files:
 - doc/release_notes/2.18.0.txt
 - doc/release_notes/2.19.0.txt
 - doc/release_notes/2.2.0.txt
+- doc/release_notes/2.20.0.txt
 - doc/release_notes/2.3.0.txt
 - doc/release_notes/2.4.0.txt
 - doc/release_notes/2.5.0.txt