sanitize 2.1.1 → 6.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of sanitize might be problematic. Click here for more details.

Files changed (30) hide show
  1. checksums.yaml +4 -4
  2. data/HISTORY.md +520 -55
  3. data/LICENSE +1 -1
  4. data/README.md +438 -168
  5. data/lib/sanitize/config/basic.rb +12 -32
  6. data/lib/sanitize/config/default.rb +118 -0
  7. data/lib/sanitize/config/relaxed.rb +716 -53
  8. data/lib/sanitize/config/restricted.rb +3 -23
  9. data/lib/sanitize/config.rb +53 -79
  10. data/lib/sanitize/css.rb +348 -0
  11. data/lib/sanitize/transformers/clean_cdata.rb +3 -3
  12. data/lib/sanitize/transformers/clean_comment.rb +6 -3
  13. data/lib/sanitize/transformers/clean_css.rb +57 -0
  14. data/lib/sanitize/transformers/clean_doctype.rb +19 -0
  15. data/lib/sanitize/transformers/clean_element.rb +192 -124
  16. data/lib/sanitize/version.rb +3 -1
  17. data/lib/sanitize.rb +172 -143
  18. data/test/common.rb +3 -0
  19. data/test/test_clean_comment.rb +47 -0
  20. data/test/test_clean_css.rb +67 -0
  21. data/test/test_clean_doctype.rb +71 -0
  22. data/test/test_clean_element.rb +545 -0
  23. data/test/test_config.rb +65 -0
  24. data/test/test_malicious_css.rb +42 -0
  25. data/test/test_malicious_html.rb +235 -0
  26. data/test/test_parser.rb +75 -0
  27. data/test/test_sanitize.rb +151 -675
  28. data/test/test_sanitize_css.rb +424 -0
  29. data/test/test_transformers.rb +230 -0
  30. metadata +44 -41
metadata CHANGED
@@ -1,86 +1,74 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sanitize
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.1
4
+ version: 6.0.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Ryan Grove
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-09-30 00:00:00.000000000 Z
11
+ date: 2021-08-04 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
- name: nokogiri
15
- requirement: !ruby/object:Gem::Requirement
16
- requirements:
17
- - - ">="
18
- - !ruby/object:Gem::Version
19
- version: 1.4.4
20
- type: :runtime
21
- prerelease: false
22
- version_requirements: !ruby/object:Gem::Requirement
23
- requirements:
24
- - - ">="
25
- - !ruby/object:Gem::Version
26
- version: 1.4.4
27
- - !ruby/object:Gem::Dependency
28
- name: minitest
14
+ name: crass
29
15
  requirement: !ruby/object:Gem::Requirement
30
16
  requirements:
31
17
  - - "~>"
32
18
  - !ruby/object:Gem::Version
33
- version: '4.7'
34
- type: :development
19
+ version: 1.0.2
20
+ type: :runtime
35
21
  prerelease: false
36
22
  version_requirements: !ruby/object:Gem::Requirement
37
23
  requirements:
38
24
  - - "~>"
39
25
  - !ruby/object:Gem::Version
40
- version: '4.7'
26
+ version: 1.0.2
41
27
  - !ruby/object:Gem::Dependency
42
- name: rake
28
+ name: nokogiri
43
29
  requirement: !ruby/object:Gem::Requirement
44
30
  requirements:
45
- - - "~>"
31
+ - - ">="
46
32
  - !ruby/object:Gem::Version
47
- version: '10.1'
48
- type: :development
33
+ version: 1.12.0
34
+ type: :runtime
49
35
  prerelease: false
50
36
  version_requirements: !ruby/object:Gem::Requirement
51
37
  requirements:
52
- - - "~>"
38
+ - - ">="
53
39
  - !ruby/object:Gem::Version
54
- version: '10.1'
40
+ version: 1.12.0
55
41
  - !ruby/object:Gem::Dependency
56
- name: redcarpet
42
+ name: minitest
57
43
  requirement: !ruby/object:Gem::Requirement
58
44
  requirements:
59
45
  - - "~>"
60
46
  - !ruby/object:Gem::Version
61
- version: 3.0.0
47
+ version: 5.14.4
62
48
  type: :development
63
49
  prerelease: false
64
50
  version_requirements: !ruby/object:Gem::Requirement
65
51
  requirements:
66
52
  - - "~>"
67
53
  - !ruby/object:Gem::Version
68
- version: 3.0.0
54
+ version: 5.14.4
69
55
  - !ruby/object:Gem::Dependency
70
- name: yard
56
+ name: rake
71
57
  requirement: !ruby/object:Gem::Requirement
72
58
  requirements:
73
59
  - - "~>"
74
60
  - !ruby/object:Gem::Version
75
- version: 0.8.7
61
+ version: 13.0.6
76
62
  type: :development
77
63
  prerelease: false
78
64
  version_requirements: !ruby/object:Gem::Requirement
79
65
  requirements:
80
66
  - - "~>"
81
67
  - !ruby/object:Gem::Version
82
- version: 0.8.7
83
- description:
68
+ version: 13.0.6
69
+ description: Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all
70
+ HTML and/or CSS from a string except the elements, attributes, and properties you
71
+ choose to allow.
84
72
  email: ryan@wonko.com
85
73
  executables: []
86
74
  extensions: []
@@ -92,17 +80,33 @@ files:
92
80
  - lib/sanitize.rb
93
81
  - lib/sanitize/config.rb
94
82
  - lib/sanitize/config/basic.rb
83
+ - lib/sanitize/config/default.rb
95
84
  - lib/sanitize/config/relaxed.rb
96
85
  - lib/sanitize/config/restricted.rb
86
+ - lib/sanitize/css.rb
97
87
  - lib/sanitize/transformers/clean_cdata.rb
98
88
  - lib/sanitize/transformers/clean_comment.rb
89
+ - lib/sanitize/transformers/clean_css.rb
90
+ - lib/sanitize/transformers/clean_doctype.rb
99
91
  - lib/sanitize/transformers/clean_element.rb
100
92
  - lib/sanitize/version.rb
93
+ - test/common.rb
94
+ - test/test_clean_comment.rb
95
+ - test/test_clean_css.rb
96
+ - test/test_clean_doctype.rb
97
+ - test/test_clean_element.rb
98
+ - test/test_config.rb
99
+ - test/test_malicious_css.rb
100
+ - test/test_malicious_html.rb
101
+ - test/test_parser.rb
101
102
  - test/test_sanitize.rb
103
+ - test/test_sanitize_css.rb
104
+ - test/test_transformers.rb
102
105
  homepage: https://github.com/rgrove/sanitize/
103
- licenses: []
106
+ licenses:
107
+ - MIT
104
108
  metadata: {}
105
- post_install_message:
109
+ post_install_message:
106
110
  rdoc_options: []
107
111
  require_paths:
108
112
  - lib
@@ -110,16 +114,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
110
114
  requirements:
111
115
  - - ">="
112
116
  - !ruby/object:Gem::Version
113
- version: 1.9.2
117
+ version: 2.5.0
114
118
  required_rubygems_version: !ruby/object:Gem::Requirement
115
119
  requirements:
116
120
  - - ">="
117
121
  - !ruby/object:Gem::Version
118
122
  version: 1.2.0
119
123
  requirements: []
120
- rubyforge_project:
121
- rubygems_version: 2.7.3
122
- signing_key:
124
+ rubygems_version: 3.2.22
125
+ signing_key:
123
126
  specification_version: 4
124
- summary: Whitelist-based HTML sanitizer.
127
+ summary: Allowlist-based HTML and CSS sanitizer.
125
128
  test_files: []