safemode 1.3.6 → 1.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c122fc8f941080a885c335b7356d2e1af7545cec8633ca23571273f069f36e0
-  data.tar.gz: f5555df33c321fbc85bff612c80568c4667e1c17d77aaa74da3311ea659b2574
+  metadata.gz: 9bdba4c6031653f1249ce8730385b47d60e917bd089809dfb405612c9a5200d4
+  data.tar.gz: a36f91fec355baf6e0f89c8354f538cfeea2fa6f2838ba6de1416f51d832af9c
 SHA512:
-  metadata.gz: 253de818e490f1e03030dfb9600960322ee6ea3c2d1d7ae571ccbc9ad44c99cb58af2d23227d6244a4de4006e0d56716b6b12c5fe83fc2fb8c874bbae5f1aca1
-  data.tar.gz: 2b468cf47ef692c3623daba9b1ea100ab4e74243d701aad3c86e46a04cc09d91470a9a57c5ecd117f26142b223ec33f1169b09bc90756d5dc96104d9b00c341e
+  metadata.gz: 20b1b1ef4ab2a9b8ac59d281688e118d264bc96f2b2fe0dec48aa3b4ce0c4fdcf0e1612d47a958f0434e5f155219372dc485b32be807bf7b40593ff2a1bc198e
+  data.tar.gz: 33c6602e612d265c4fb227de48ac6f204eb6d473bf35027b181335227584331a80b6fb57e424e5d7c658e3179296505c6800aa0a3a294f33a0e4efc44ac5518a

data/Rakefile

@@ -23,7 +23,7 @@ require 'jeweler'
 Jeweler::Tasks.new do |gem|
   # gem is a Gem::Specification... see http://docs.rubygems.org/read/chapter/20 for more options
   gem.name = "safemode"
-  gem.homepage = "http://github.com/svenfuchs/safemode"
+  gem.homepage = "https://github.com/svenfuchs/safemode"
   gem.license = "MIT"
   gem.summary = %Q{A library for safe evaluation of Ruby code based on ParseTree/RubyParser and Ruby2Ruby}
   gem.description = %Q{A library for safe evaluation of Ruby code based on RubyParser and Ruby2Ruby. Provides Rails ActionView template handlers for ERB and Haml.}
@@ -36,6 +36,7 @@ Jeweler::Tasks.new do |gem|
     "Ohad Levy",
     "Dmitri Dolguikh",
   ]
+  gem.files.exclude '.travis.yml'
   # dependencies defined in Gemfile
 end
 Jeweler::RubygemsDotOrgTasks.new

data/lib/safemode/blankslate.rb

@@ -1,7 +1,7 @@
 module Safemode
   class Blankslate
     @@allow_instance_methods = ['class', 'methods', 'respond_to?', 'respond_to_missing?', 'to_s', 'instance_variable_get']
-    @@allow_class_methods    = ['methods', 'new', 'name', '<', 'ancestors', '==']  # < needed in Rails Object#subclasses_of
+    @@allow_class_methods    = ['singleton_class?', 'methods', 'new', 'name', '<', 'ancestors', '==']  # < needed in Rails Object#subclasses_of
     if defined?(JRUBY_VERSION)
       # JRuby seems to silently fail to remove method_missing
       # (also see https://github.com/jruby/jruby/blob/9.1.7.0/core/src/main/java/org/jruby/RubyModule.java#L1109)

data/lib/safemode/core_jails.rb

@@ -48,7 +48,7 @@ module Safemode
     'Array'      => %w(any? assoc at blank? collect collect! compact compact!
                     concat delete delete_at delete_if each each_index empty?
                     fetch fill first flatten flatten! hash include? index
-                    indexes indices inject insert join last length map map!
+                    indexes indices inject insert join last length map map! max min
                     nitems pop push present? rassoc reject reject! reverse
                     reverse! reverse_each rindex select shift size slice
                     slice! sort sort! transpose to_sentence uniq uniq! unshift
@@ -70,7 +70,7 @@ module Safemode
                     to_int to_s truncate zero?),
 
     'Hash'       => %w(any? blank? clear delete delete_if each each_key
-                    each_pair each_value empty? fetch has_key? has_value?
+                    each_pair each_value empty? fetch dig has_key? has_value?
                     include? index invert key? keys length member? merge merge!
                     present? rec_merge! rehash reject reject! select shift
                     size sort store update value? values values_at),

data/safemode.gemspec

@@ -2,25 +2,25 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
-# stub: safemode 1.3.6 ruby lib
+# stub: safemode 1.3.7 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "safemode".freeze
-  s.version = "1.3.6"
+  s.version = "1.3.7"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib".freeze]
   s.authors = ["Sven Fuchs".freeze, "Peter Cooper".freeze, "Matthias Viehweger".freeze, "Kingsley Hendrickse".freeze, "Ohad Levy".freeze, "Dmitri Dolguikh".freeze]
-  s.date = "2020-08-31"
+  s.date = "2022-04-26"
   s.description = "A library for safe evaluation of Ruby code based on RubyParser and Ruby2Ruby. Provides Rails ActionView template handlers for ERB and Haml.".freeze
   s.email = "ohadlevy@gmail.com".freeze
   s.extra_rdoc_files = [
+    "LICENSE",
     "README.markdown"
   ]
   s.files = [
-    ".travis.yml",
     "Gemfile",
-    "LICENCSE",
+    "LICENSE",
     "README.markdown",
     "Rakefile",
     "VERSION",
@@ -47,7 +47,7 @@ Gem::Specification.new do |s|
     "test/test_safemode_eval.rb",
     "test/test_safemode_parser.rb"
   ]
-  s.homepage = "http://github.com/svenfuchs/safemode".freeze
+  s.homepage = "https://github.com/svenfuchs/safemode".freeze
   s.licenses = ["MIT".freeze]
   s.rubygems_version = "2.7.6".freeze
   s.summary = "A library for safe evaluation of Ruby code based on ParseTree/RubyParser and Ruby2Ruby".freeze

data/test/test_helper.rb

@@ -155,6 +155,21 @@ class Article::ExtendedJail < Article::Jail
 end
 
 class Comment::Jail < Safemode::Jail
-  allow :article, :text
+  allow :article, :text, :object_id
   allow_class_method :all
 end
+
+class ExtendedComment < Comment
+  def extended_text
+    "extended comment #{object_id}"
+  end
+
+  def to_jail
+    ExtendedComment::Jail.new self
+  end
+
+  class Jail < Comment::Jail
+    allow :extended_text
+  end
+end
+

data/test/test_jail.rb

@@ -5,6 +5,7 @@ class TestJail < Test::Unit::TestCase
     @article = Article.new.to_jail
     @comment = @article.comments.first
     @comment_class = Comment.to_jail
+    @extended_comment = ExtendedComment.new(@article).to_jail
   end
 
   def test_explicitly_allowed_instance_methods_should_be_accessible
@@ -36,7 +37,8 @@ class TestJail < Test::Unit::TestCase
                 "allow_instance_method", "allow_class_method", "allowed_instance_method?",
                 "allowed_class_method?", "allowed_instance_methods", "allowed_class_methods",
                 "<", # < needed in Rails Object#subclasses_of
-                "ancestors", "=="] # ancestors and == needed in Rails::Generator::Spec#lookup_class
+                "ancestors", "==", # ancestors and == needed in Rails::Generator::Spec#lookup_class
+                "singleton_class?" ]
 
     if defined?(JRUBY_VERSION)
       (expected << ['method_missing', 'singleton_method_undefined', 'singleton_method_added']).flatten!  # needed for running under jruby
@@ -56,6 +58,14 @@ class TestJail < Test::Unit::TestCase
     assert !@article.respond_to?(:bogus)
   end
 
+  def test_methodcall_comment
+    assert_equal "comment #{@comment.object_id}", @comment.text
+  end
+
+  def test_methodcall_extended_comment
+    assert_equal "extended comment #{@extended_comment.object_id}", @extended_comment.extended_text
+  end
+
   private
 
   def objects

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: safemode
 version: !ruby/object:Gem::Version
-  version: 1.3.6
+  version: 1.3.7
 platform: ruby
 authors:
 - Sven Fuchs
@@ -10,10 +10,10 @@ authors:
 - Kingsley Hendrickse
 - Ohad Levy
 - Dmitri Dolguikh
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-08-31 00:00:00.000000000 Z
+date: 2022-04-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ruby2ruby
@@ -133,11 +133,11 @@ email: ohadlevy@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files:
+- LICENSE
 - README.markdown
 files:
-- ".travis.yml"
 - Gemfile
-- LICENCSE
+- LICENSE
 - README.markdown
 - Rakefile
 - VERSION
@@ -163,11 +163,11 @@ files:
 - test/test_jail.rb
 - test/test_safemode_eval.rb
 - test/test_safemode_parser.rb
-homepage: http://github.com/svenfuchs/safemode
+homepage: https://github.com/svenfuchs/safemode
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -182,9 +182,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
-signing_key: 
+rubygems_version: 3.0.3
+signing_key:
 specification_version: 4
 summary: A library for safe evaluation of Ruby code based on ParseTree/RubyParser
   and Ruby2Ruby

data/.travis.yml

@@ -1,16 +0,0 @@
----
-os: linux
-dist: xenial
-language: ruby
-rvm:
-  - 2.2
-  - 2.3
-  - 2.4
-  - 2.5
-  - 2.6
-  - 2.7
-  - jruby-9
-matrix:
-  allow_failures:
-    - rvm: jruby-9
-before_install: gem install bundler --version 1.17.3