rspec-sonarqube-formatter 1.1.0 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 93972356452ed71c7faa406e7bbf606ecd50f3e132b0e069275b512b31f600b1
-  data.tar.gz: a93154e5011e94d1d0803600e8b3e1ebad2681e8546d8f75619c193ef11f900c
+  metadata.gz: ef424483d247fd4aa4c43b094723e01662b069d35ab1995537e4f77b9b37b8ae
+  data.tar.gz: 70d55f43dad49c2652971f8e750250dabe7d6bbd755829f33320fce98c5dd0f7
 SHA512:
-  metadata.gz: 7615b6c9602c81f122a17ca9721eb4fe2ab25d1a36793cfa931d68dc8e99a0eed4b1e0e6c9bc1ed7203037e098fb875e9e7f3503490434e9ce5c208c665e1fa3
-  data.tar.gz: 0de1ff8fffa56043ee5145981cda0b56e2bf04bd8c319a24e1efcafe9316a62725423f8e44c02b4b7dd852b47df47a0924f505ccc1c9bef4d922c5785ed8ee5a
+  metadata.gz: cce8ac04f3ee6794e3b1859e8498c31ce4f8001fc53ab5724263337ad96f878d4b35d4406921149f6827c83da0c305f21e6109baa44bd57cddf9691ab00304a7
+  data.tar.gz: 2b216e5bbc402bf93a9022d5490853807659a389a96db24db13c83df4319e0f2c898540ca80a4621abfe040847d936c92ace8b5a51bc1b3f06023f9de03ebdea

data/.travis.yml

@@ -42,7 +42,7 @@ notifications:
 
 deploy:
   - provider: rubygems
-    skip_cleanup: true
+    cleanup: false
     api_key:
       secure: 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
     gem: rspec-sonarqube-formatter
@@ -54,7 +54,7 @@ deploy:
     api_key:
       secure: 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
     file: "*.gem"
-    skip_cleanup: true
+    cleanup: false
     on:
       tags: true
       rvm: 2.6

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rspec-sonarqube-formatter (1.1.0)
+    rspec-sonarqube-formatter (1.0.0.pre.local)
       rspec (~> 3.0)
 
 GEM

data/SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported Versions
+
+These versions are supported:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.1.0   | :white_check_mark: |
+| 1.0.0   | :white_check_mark: |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Please report any vulnerabilities 
+[as an issue](https://github.com/otherguy/rspec-sonarqube-formatter/issues) 
+and tag it with `security`.
+
+Expect a response within 24 hours. Any vulnerabilities will be fixed
+within a reasonable time frame.

data/lib/rspec_sonarqube_formatter.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'htmlentities'
+
 class RspecSonarqubeFormatter
   ::RSpec::Core::Formatters.register self,
     :start, :stop, :example_group_started, :example_started, :example_passed, :example_failed, :example_pending
@@ -39,7 +41,7 @@ class RspecSonarqubeFormatter
 
   def example_failed(notification)
     @output.puts "    <testCase name=\"#{clean_string(notification.example.description)}\" duration=\"#{duration(notification.example)}\">"
-    @output.puts "      <failure message=\"#{notification.exception}\" stacktrace=\"#{notification.example.location}\" />"
+    @output.puts "      <failure message=\"#{clean_string(notification.exception)}\" stacktrace=\"#{clean_string(notification.example.location)}\" />"
     @output.puts '    </testCase>'
   end
 
@@ -50,7 +52,7 @@ class RspecSonarqubeFormatter
   end
 
   def clean_string(input)
-    input.to_s.gsub(/\e\[\d;*\d*m/, '').tr('"', "'")
+    HTMLEntities.new.encode input.to_s.gsub(/\e\[\d;*\d*m/, '').tr('"', "'")
   end
 
   def duration(example)

data/rspec-sonarqube-formatter.gemspec

@@ -31,6 +31,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
+  spec.add_dependency 'htmlentities', '~> 4.3.3'
   spec.add_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'bundler', '~> 2.0.2'
   spec.add_development_dependency 'coveralls', '~> 0.8.23'

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: rspec-sonarqube-formatter
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.2.0
 platform: ruby
 authors:
 - Alexander Graf
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-12-05 00:00:00.000000000 Z
+date: 2019-12-13 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: htmlentities
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.3.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.3.3
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -132,6 +146,7 @@ files:
 - LICENSE.md
 - README.md
 - Rakefile
+- SECURITY.md
 - documentation/sonarcloud.png
 - lib/rspec_sonarqube_formatter.rb
 - rspec-sonarqube-formatter.gemspec