sanitize 1.0.1 → 1.0.2

data/HISTORY

@@ -1,6 +1,10 @@
 Sanitize History
 ================================================================================
 
+Version 1.0.2 (2009-01-04)
+  * Fixed a bug that caused an exception to be thrown when parsing a valueless
+    attribute that's expected to contain a URL.
+
 Version 1.0.1 (2009-01-01)
   * You can now specify :relative in a protocol config array to allow attributes
     containing relative URLs with no protocol. The Basic and Relaxed configs

data/README.rdoc

@@ -15,7 +15,7 @@ or maliciously-formed HTML. When in doubt, Sanitize always errs on the side of
 caution.
 
 *Author*::    Ryan Grove (mailto:ryan@wonko.com)
-*Version*::   1.0.1 (2009-01-01)
+*Version*::   1.0.2 (2009-01-04)
 *Copyright*:: Copyright (c) 2009 Ryan Grove. All rights reserved.
 *License*::   MIT License (http://opensource.org/licenses/mit-license.php)
 *Website*::   http://github.com/rgrove/sanitize
@@ -24,6 +24,7 @@ caution.
 
 * RubyGems
 * Hpricot 0.6+
+* HTMLEntities 4.0.0+
 
 == Usage
 

data/lib/sanitize.rb

@@ -85,7 +85,7 @@ class Sanitize
       if node.comment?
         node.swap('') unless @config[:allow_comments]
       elsif node.elem?
-        name = node.name.downcase
+        name = node.name.to_s.downcase
 
         # Delete any element that isn't in the whitelist.
         unless @config[:elements].include?(name)
@@ -96,7 +96,7 @@ class Sanitize
         if @config[:attributes].has_key?(name)
           # Delete any attribute that isn't in the whitelist for this element.
           node.raw_attributes.delete_if do |key, value|
-            !@config[:attributes][name].include?(key.downcase)
+            !@config[:attributes][name].include?(key.to_s.downcase)
           end
 
           # Delete remaining attributes that use unacceptable protocols.
@@ -105,8 +105,9 @@ class Sanitize
 
             node.raw_attributes.delete_if do |key, value|
               next false unless protocol.has_key?(key)
+              next true if value.nil?
 
-              if value.downcase =~ /^([^:]+)(?:\:|&#0*58;|&#x0*3a;)/
+              if value.to_s.downcase =~ /^([^:]+)(?:\:|&#0*58;|&#x0*3a;)/
                 !protocol[key].include?($1.downcase)
               else
                 !protocol[key].include?(:relative)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: sanitize
 version: !ruby/object:Gem::Version 
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors: 
 - Ryan Grove
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2009-01-01 00:00:00 -08:00
+date: 2009-01-04 00:00:00 -08:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency