safe_redirect_rails 0.1.0 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 00230c02950156c12350b15c791eaaa6c86eface415a987d3ee7d832e5b3df6e
-  data.tar.gz: 2647132cb892ec055d91352f837e3d7f8881dcd7ee5d8268448652a796906b9c
+  metadata.gz: 16bb809106293e6a9bf0fbb97bf12f688eaa23781c070153e2f42430df463c8c
+  data.tar.gz: 768d2f697275051f6c6b42d3981f2d3e7bae73822265f4dbb6e7452b0f469941
 SHA512:
-  metadata.gz: 4816cd51aec868d4c9886061abf028c6f2141cb1ff1873611e362cb2d5992a0168391eaca7b70347bb82fe27a873ef1c0ba3bc21697e06bcfb4772df4f601143
-  data.tar.gz: 60dad28b40e0e5c710d2003fe6747b9863f481eb48da0f266884a8c7544b7207a69e0ef5dba5f05e34c2b4d069b2ca0908711dbb9ee1be7197f3fc08847f402c
+  metadata.gz: 910b4b243faf8d7069f0da4ffd71ad02fda3624bd3faa5a4efe49dbd138abfec2cbc3ebdcbb5cf72cc585d50759e557382d0d39ae0b0095f64d44630e65c225c
+  data.tar.gz: ea4e0b19f33caf1a8101e8dafe2162d268c9bff26372e18f6793541755e5270457fb0ac997e9bf63a8554e7424b9de1900e5475ed69432e25b710d0014f02ec2

data/lib/safe_redirect_rails/safe_redirect_rails.rb

@@ -7,24 +7,9 @@ module SafeRedirectRails
     return true if valid_uri?(uri)
     return false if uri.host.nil?
 
-    SafeRedirectRails.configuration.domain_whitelists.any? do |domain|
-      if domain.include?("*")
-        rf = domain.split(/(\*)/).map{ |f| f == "*" ? "[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9]?" : Regexp.escape(f) }
-        regexp = Regexp.new("\\A#{rf.join}\\z")
-
-        safe = uri.host.match(regexp)
-
-        # if domain starts with *. and contains no other wildcards, include the
-        # naked domain too (e.g. foo.org when *.foo.org is the whitelist)
-        if domain =~ /\A\*\.[^\*]+\z/
-          naked_domain = domain.gsub("*.", "")
-          safe || uri.host == naked_domain
-        else
-          safe
-        end
-      else
-        uri.host == domain
-      end
+    SafeRedirectRails.configuration.domain_whitelists.any? do |pattern|
+      regexp = domain_pattern_to_regex(pattern)
+      uri.host.match?(regexp)
     end
   end
 
@@ -99,4 +84,10 @@ module SafeRedirectRails
     end
   end
 
+  def domain_pattern_to_regex(pattern)
+    escaped = pattern.split("*").map { |part| Regexp.escape(part) }.join("*")
+    regex_str = "^" + escaped.gsub("*", "[A-Za-z0-9\-]+") + "$"
+    Regexp.new(regex_str)
+  end
+
 end

data/lib/safe_redirect_rails/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SafeRedirectRails
-  VERSION = "0.1.0"
+  VERSION = "0.1.7"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: safe_redirect_rails
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.7
 platform: ruby
 authors:
 - Tuan Pham
 bindir: bin
 cert_chain: []
-date: 2025-03-21 00:00:00.000000000 Z
+date: 2025-06-09 00:00:00.000000000 Z
 dependencies: []
 description: This gem provides a simple way to redirect to safe URLs
 email: