sanitize-rails 0.9.1 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 92119626e5ebb931fe890e757c3c2fc9b287a351
-  data.tar.gz: 315002fac67c6275c2b6ef6eafeef4f946cf3f52
+  metadata.gz: 6ec8f2b92a344e0040ed2e8b9ab5f2f04aaeeca3
+  data.tar.gz: f0f4f8f6956493fa27bd846d8ddc6152ba93c74c
 SHA512:
-  metadata.gz: 452ec0f4ac318d174ed4625646ad62e9f3524faa926eaff28726d2fb1e57127ac9db389bf1aadbd1f312da30c760ea12beed184e4d69cb739d50070ccd710aae
-  data.tar.gz: 44077d2a5c5a330f61c2903649b0ef71e246af81d6323047713d69d21292c0893af6883cf41168b2cac25547ee5397c89c47ae4bf647a2d1015d9c11400a60ad
+  metadata.gz: 98043ba7284b51877fb1b2613cf1fb4c54b1ea7e76331e230b0f0613e180730db6427f134e10d7f01176fb82b173c9b8c43b7d1b95af8c666b3edd2ad7efa264
+  data.tar.gz: 2ccaf00041d33e2eb027e746d945f5d92f172237d4ae8d452c37eb306a3d672c64824656943213f0e15b52dcc729c9823cd52ad78a6ddd3310d45c2f0f4be91b

data/.gitignore

@@ -6,3 +6,4 @@
 Gemfile.lock
 html
 pkg
+.idea

data/lib/sanitize/rails/active_record.rb

@@ -22,10 +22,10 @@ module Sanitize::Rails
 
       define_method(sanitizer) do                  # # Unrolled version
         fields.each do |field|                     #
-          value = send(field)
+          value = read_attribute(field)
           unless value.blank?                      # def sanitize_fieldA_fieldB
-            sanitized = Engine.clean(value)        #   self.fieldA = Engine.clean(self.fieldA) unless fieldA.blank?
-            send("#{field}=", sanitized)           #   self.fieldB = Engine.clean(self.fieldB) unless fieldB.blank?
+            sanitized = Engine.clean(value)        #   write_attribute(fieldA, Engine.clean(read_attribute(fieldA))) unless fieldA.blank?
+            write_attribute(field, sanitized)      #   write_attribute(fieldB, Engine.clean(read_attribute(fieldB))) unless fieldB.blank?
           end                                      # end
         end                                        #
       end                                          # end

data/lib/sanitize/rails/engine.rb

@@ -32,13 +32,14 @@ module Sanitize::Rails
     # means that text passed through `Sanitize::Rails::Engine.clean`
     # will not be escaped by ActionView's XSS filtering utilities.
     def clean(string)
-      ::ActiveSupport::SafeBuffer.new string.to_s.dup.tap { |s| clean!(s) }
+      ::ActiveSupport::SafeBuffer.new cleaner.fragment(string)
     end
 
     # Sanitizes the given `string` in place and does NOT mark it as `html_safe`
     #
     def clean!(string)
-      cleaner.clean!(string.to_s).to_s
+      return '' if string.nil?
+      string.replace cleaner.fragment(string)
     end
 
     def callback_for(options) #:nodoc:

data/lib/sanitize/rails/version.rb

@@ -1,5 +1,5 @@
 class Sanitize
   module Rails
-    VERSION = '0.9.1'
+    VERSION = '1.0.0'
   end
 end

data/sanitize-rails.gemspec

@@ -18,5 +18,5 @@ Gem::Specification.new do |s|
   s.files         = `git ls-files`.split("\n")
 
   s.add_dependency "rails", ">= 3.0"
-  s.add_dependency "sanitize", "~> 2.0"
+  s.add_dependency "sanitize", "~> 3.0"
 end

data/test/sanitize_rails_string_extension_test.rb

@@ -17,7 +17,7 @@ class SanitizeRailsStringExtensionTest < Minitest::Test
     assert_instance_of SanitizableString, sanitizable_string
 
     new_string = sanitizable_string.sanitize_as_html!
-    assert_instance_of String, new_string
+    assert_instance_of SanitizableString, new_string
   end
 
   def test_respond_to_sanitize_as_html

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sanitize-rails
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 1.0.0
 platform: ruby
 authors:
 - Marcello Barnaba
@@ -32,14 +32,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.0'
 description: 
 email:
 - vjt@openssl.it