sanitize 2.1.1 → 3.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of sanitize might be problematic. Click here for more details.

Files changed (30) hide show
  1. checksums.yaml +5 -5
  2. data/HISTORY.md +93 -14
  3. data/README.md +346 -134
  4. data/lib/sanitize.rb +177 -132
  5. data/lib/sanitize/config.rb +53 -79
  6. data/lib/sanitize/config/basic.rb +12 -32
  7. data/lib/sanitize/config/default.rb +103 -0
  8. data/lib/sanitize/config/relaxed.rb +517 -52
  9. data/lib/sanitize/config/restricted.rb +3 -23
  10. data/lib/sanitize/css.rb +218 -0
  11. data/lib/sanitize/transformers/clean_cdata.rb +3 -3
  12. data/lib/sanitize/transformers/clean_comment.rb +6 -3
  13. data/lib/sanitize/transformers/clean_css.rb +57 -0
  14. data/lib/sanitize/transformers/clean_doctype.rb +13 -0
  15. data/lib/sanitize/transformers/clean_element.rb +99 -129
  16. data/lib/sanitize/version.rb +3 -1
  17. data/test/common.rb +34 -0
  18. data/test/test_clean_comment.rb +51 -0
  19. data/test/test_clean_css.rb +66 -0
  20. data/test/test_clean_doctype.rb +71 -0
  21. data/test/test_clean_element.rb +399 -0
  22. data/test/test_config.rb +65 -0
  23. data/test/test_malicious_css.rb +42 -0
  24. data/test/test_malicious_html.rb +128 -0
  25. data/test/test_parser.rb +104 -0
  26. data/test/test_sanitize.rb +65 -693
  27. data/test/test_sanitize_css.rb +222 -0
  28. data/test/test_transformers.rb +144 -0
  29. data/test/test_unicode.rb +84 -0
  30. metadata +56 -8
metadata CHANGED
@@ -1,15 +1,29 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sanitize
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.1
4
+ version: 3.0.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Ryan Grove
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-09-30 00:00:00.000000000 Z
11
+ date: 2014-06-21 00:00:00.000000000 Z
12
12
  dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: crass
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: 0.2.0
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: 0.2.0
13
27
  - !ruby/object:Gem::Dependency
14
28
  name: nokogiri
15
29
  requirement: !ruby/object:Gem::Requirement
@@ -24,20 +38,34 @@ dependencies:
24
38
  - - ">="
25
39
  - !ruby/object:Gem::Version
26
40
  version: 1.4.4
41
+ - !ruby/object:Gem::Dependency
42
+ name: nokogumbo
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - '='
46
+ - !ruby/object:Gem::Version
47
+ version: 1.1.9
48
+ type: :runtime
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - '='
53
+ - !ruby/object:Gem::Version
54
+ version: 1.1.9
27
55
  - !ruby/object:Gem::Dependency
28
56
  name: minitest
29
57
  requirement: !ruby/object:Gem::Requirement
30
58
  requirements:
31
59
  - - "~>"
32
60
  - !ruby/object:Gem::Version
33
- version: '4.7'
61
+ version: 5.3.4
34
62
  type: :development
35
63
  prerelease: false
36
64
  version_requirements: !ruby/object:Gem::Requirement
37
65
  requirements:
38
66
  - - "~>"
39
67
  - !ruby/object:Gem::Version
40
- version: '4.7'
68
+ version: 5.3.4
41
69
  - !ruby/object:Gem::Dependency
42
70
  name: rake
43
71
  requirement: !ruby/object:Gem::Requirement
@@ -80,7 +108,9 @@ dependencies:
80
108
  - - "~>"
81
109
  - !ruby/object:Gem::Version
82
110
  version: 0.8.7
83
- description:
111
+ description: Sanitize is a whitelist-based HTML and CSS sanitizer. Given a list of
112
+ acceptable elements, attributes, and CSS properties, Sanitize will remove all unacceptable
113
+ HTML and/or CSS from a string.
84
114
  email: ryan@wonko.com
85
115
  executables: []
86
116
  extensions: []
@@ -92,15 +122,32 @@ files:
92
122
  - lib/sanitize.rb
93
123
  - lib/sanitize/config.rb
94
124
  - lib/sanitize/config/basic.rb
125
+ - lib/sanitize/config/default.rb
95
126
  - lib/sanitize/config/relaxed.rb
96
127
  - lib/sanitize/config/restricted.rb
128
+ - lib/sanitize/css.rb
97
129
  - lib/sanitize/transformers/clean_cdata.rb
98
130
  - lib/sanitize/transformers/clean_comment.rb
131
+ - lib/sanitize/transformers/clean_css.rb
132
+ - lib/sanitize/transformers/clean_doctype.rb
99
133
  - lib/sanitize/transformers/clean_element.rb
100
134
  - lib/sanitize/version.rb
135
+ - test/common.rb
136
+ - test/test_clean_comment.rb
137
+ - test/test_clean_css.rb
138
+ - test/test_clean_doctype.rb
139
+ - test/test_clean_element.rb
140
+ - test/test_config.rb
141
+ - test/test_malicious_css.rb
142
+ - test/test_malicious_html.rb
143
+ - test/test_parser.rb
101
144
  - test/test_sanitize.rb
145
+ - test/test_sanitize_css.rb
146
+ - test/test_transformers.rb
147
+ - test/test_unicode.rb
102
148
  homepage: https://github.com/rgrove/sanitize/
103
- licenses: []
149
+ licenses:
150
+ - MIT
104
151
  metadata: {}
105
152
  post_install_message:
106
153
  rdoc_options: []
@@ -118,8 +165,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
118
165
  version: 1.2.0
119
166
  requirements: []
120
167
  rubyforge_project:
121
- rubygems_version: 2.7.3
168
+ rubygems_version: 2.2.2
122
169
  signing_key:
123
170
  specification_version: 4
124
- summary: Whitelist-based HTML sanitizer.
171
+ summary: Whitelist-based HTML and CSS sanitizer.
125
172
  test_files: []
173
+ has_rdoc: