safe_redirect 0.2.3 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9e0bbcba98a1e205b970a2350ad00ee249c29179
-  data.tar.gz: d83b859f1a3dff81021f1b3fa7b872e7592f262e
+  metadata.gz: 336f84a6b03db00df68f1f76be936b3e199cd829
+  data.tar.gz: f65b82666b23abce9eeb46e310aef4526ca9d5f1
 SHA512:
-  metadata.gz: 421f582d00d284e2229790a0a63761a3eb1794cab6ac68435f1d68f378619ee47f08495cab470f962016ad568cdaa1408b3187be13133396ed20355186263897
-  data.tar.gz: 430412ac48189ac16692c3e78e70ef4bac43523e67f33efcae09ab61f49bf9a9a36854d877ebf7dce681323f972a57126e230b05bb0e47ae09b4004688bd7f32
+  metadata.gz: e8c77143c12ec4d810fa92554dd22fb7277aaad3552b927b3dc817565b5a0996ffabcd299cb968a5f7a82df8f4210934d71178a8092b79b46d0774aebf81d3f6
+  data.tar.gz: 50d512e6af84ad7353914b1406eacc80208f5874d9787edbea9707afc49415081b6702e6953f1537a1c1c6000188ad6e0ffc8d83638f8beb4169f3648bcaf632

data/lib/safe_redirect/safe_redirect.rb

@@ -47,7 +47,7 @@ module SafeRedirect
 
   def clean_path(path)
     uri = URI.parse(path)
-    safe_domain?(uri) ? path : SafeRedirect.configuration.default_path
+    valid_path?(path) && safe_domain?(uri) ? path : SafeRedirect.configuration.default_path
   rescue URI::InvalidURIError
     SafeRedirect.configuration.default_path
   end
@@ -66,4 +66,8 @@ module SafeRedirect
     false
   end
 
+  def valid_path?(path)
+    path !~ /\/\/\//
+  end
+
 end

data/lib/safe_redirect/version.rb

@@ -1,3 +1,3 @@
 module SafeRedirect
-  VERSION = '0.2.3'
+  VERSION = '0.2.4'
 end

data/spec/lib/safe_redirect/safe_redirect_spec.rb

@@ -33,6 +33,7 @@ module SafeRedirect
       "https://www-bukalapak.com",
       "https://www.bukalapak.com\n.evil.com",
       "http://blah.blah.foo.org",
+      "///bit.ly/1hqE77G",
     ]
 
     SAFE_PATHS.each do |path|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: safe_redirect
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.4
 platform: ruby
 authors:
 - Edwin Tunggawan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-11-14 00:00:00.000000000 Z
+date: 2017-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec