sanitize-rails 0.6.2 → 0.7.0

data/.gitignore

@@ -0,0 +1,4 @@
+html
+pkg
+.*.sw?
+.DS_Store

data/Gemfile

@@ -0,0 +1,3 @@
+source "https://rubygems.org"
+
+gemspec

data/Rakefile

@@ -1,40 +1,22 @@
-require 'rake'
-require 'rdoc/task'
-
-require 'lib/sanitize/rails'
-
 begin
-  require 'jeweler'
-  Jeweler::Tasks.new do |gemspec|
-    gemspec.name             = 'sanitize-rails'
-
-    gemspec.summary          = 'A sanitizer bridge for Rails applications'
-    gemspec.authors          = ['Marcello Barnaba']
-    gemspec.email            = 'vjt@openssl.it'
-    gemspec.homepage         = 'http://github.com/vjt/sanitize-rails'
-
-    gemspec.files            = %w( README.md Rakefile rails/init.rb ) + Dir['lib/**/*']
-    gemspec.extra_rdoc_files = %w( README.md )
-    gemspec.has_rdoc         = true
-
-    gemspec.version          = Sanitize::Rails::Version
-    gemspec.require_path     = 'lib'
-
-    gemspec.add_dependency('rails', '~> 3.0')
-    gemspec.add_dependency('sanitize')
-  end
+  require 'bundler/setup'
 rescue LoadError
-  puts 'Jeweler not available. Install it with: gem install jeweler'
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
 end
 
-desc 'Generate the rdoc'
-Rake::RDocTask.new do |rdoc|
-  rdoc.rdoc_files.add %w( README.md lib/**/*.rb )
+require 'rdoc/task'
 
-  rdoc.main  = 'README.md'
-  rdoc.title = 'Sanitizer-Rails'
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'doc'
+  rdoc.title    = 'Sanitize-Rails'
+  rdoc.options << '--line-numbers'
+
+  rdoc.rdoc_files.include 'README.md'
+  rdoc.rdoc_files.include 'lib/**/*.rb'
 end
 
+Bundler::GemHelper.install_tasks
+
 desc 'Will someone help write tests?'
 task :default do
   puts

data/example/sanitizer.rb

@@ -0,0 +1,62 @@
+HTML::WhiteListSanitizer.allowed_css_properties   = %w(text-align background-color)
+HTML::WhiteListSanitizer.shorthand_css_properties = %w()
+HTML::WhiteListSanitizer.allowed_css_keywords     = %w(left center right justify rgb)
+
+engine = HTML::WhiteListSanitizer.new
+
+css_sanitizer = lambda {|options|
+  node = options[:node]
+  if node.present? && node.element? && node['style'].present?
+    node['style'] = engine.sanitize_css node['style']
+  end
+}
+
+div_transformer = lambda {|options|
+  node = options[:node]
+  if node.present? && node.element? && node.name.downcase == 'div'
+    node.name = 'p'
+  end
+}
+
+ie_cleaner = lambda {|options|
+  node = options[:node]
+  return unless node.present? && node.element?
+
+  if align = node['align']
+    node['style'] = "text-align: #{align};"
+  end
+
+  if node.name.downcase == 'font'
+    node.name = 'span'
+  end
+}
+
+Sanitize::Rails.configure(
+  :elements => %w[ a b blockquote br div img em i li ol p span strong u ul ],
+
+  :attributes => {
+    :all  => ['style'],
+    'a'   => ['href'],
+    'img' => ['src']
+  },
+
+  :add_attributes => {
+    'a' => {
+      'rel'    => 'nofollow',
+      'target' => '_blank'
+    }
+  },
+
+  :protocols => {
+    'a' => {'href' => ['ftp', 'http', 'https', 'mailto', :relative]},
+    'img' => {'src' => ['http', 'https']}
+  },
+
+  :transformers => [css_sanitizer, div_transformer, ie_cleaner],
+
+  :whitespace_elements => %w(
+    address article aside blockquote dd dl dt footer
+    h1 h2 h3 h4 h5 h6 header hgroup hr nav pre section
+    tr td option input
+  )
+)

data/lib/sanitize/rails.rb

@@ -4,7 +4,6 @@ require 'sanitize'
 require 'sanitize/railtie' if defined? Rails
 
 module Sanitize::Rails
-  Version = '0.6.2'
 
   # Configures the sanitizer with the given `config` hash.
   #

data/lib/sanitize/rails/version.rb

@@ -0,0 +1,5 @@
+module Sanitize
+  module Rails
+    VERSION = '0.7.0'
+  end
+end

data/sanitize-rails.gemspec

@@ -0,0 +1,21 @@
+# -*- encoding: utf-8 -*-
+#
+$:.push File.expand_path("../lib", __FILE__)
+
+require 'sanitize/rails/version'
+
+Gem::Specification.new do |s|
+  s.name          = "sanitize-rails"
+  s.version       = Sanitize::Rails::VERSION
+  s.date          = "2013-07-15"
+  s.authors       = ["Marcello Barnaba"]
+  s.email         = ["vjt@openssl.it"]
+  s.homepage      = "http://github.com/vjt/sanitize-rails"
+  s.summary       = "A sanitizer bridge for Rails applications"
+
+  s.require_paths = ["lib"]
+  s.files         = `git ls-files`.split("\n")
+
+  s.add_dependency "rails", "~> 3.0"
+  s.add_dependency "sanitize"
+end

metadata

@@ -1,96 +1,82 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: sanitize-rails
-version: !ruby/object:Gem::Version 
-  hash: 3
+version: !ruby/object:Gem::Version
+  version: 0.7.0
   prerelease: 
-  segments: 
-  - 0
-  - 6
-  - 2
-  version: 0.6.2
 platform: ruby
-authors: 
+authors:
 - Marcello Barnaba
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2012-10-04 00:00:00 Z
-dependencies: 
-- !ruby/object:Gem::Dependency 
+date: 2013-07-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
   name: rails
-  prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
+  requirement: &74022620 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
+    requirements:
     - - ~>
-      - !ruby/object:Gem::Version 
-        hash: 7
-        segments: 
-        - 3
-        - 0
-        version: "3.0"
+      - !ruby/object:Gem::Version
+        version: '3.0'
   type: :runtime
-  version_requirements: *id001
-- !ruby/object:Gem::Dependency 
-  name: sanitize
   prerelease: false
-  requirement: &id002 !ruby/object:Gem::Requirement 
+  version_requirements: *74022620
+- !ruby/object:Gem::Dependency
+  name: sanitize
+  requirement: &74022110 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ">="
-      - !ruby/object:Gem::Version 
-        hash: 3
-        segments: 
-        - 0
-        version: "0"
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
   type: :runtime
-  version_requirements: *id002
+  prerelease: false
+  version_requirements: *74022110
 description: 
-email: vjt@openssl.it
+email:
+- vjt@openssl.it
 executables: []
-
 extensions: []
-
-extra_rdoc_files: 
-- README.md
-files: 
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
 - README.md
 - Rakefile
+- example/sanitizer.rb
 - lib/sanitize/rails.rb
+- lib/sanitize/rails/version.rb
 - lib/sanitize/railtie.rb
+- sanitize-rails.gemspec
 homepage: http://github.com/vjt/sanitize-rails
 licenses: []
-
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
+required_ruby_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
       - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
+      hash: -72034417
+required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
       - 0
-      version: "0"
+      hash: -72034417
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.8.12
+rubygems_version: 1.8.11
 signing_key: 
 specification_version: 3
 summary: A sanitizer bridge for Rails applications
 test_files: []
-