slicker 0.3.2 → 0.4.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/Gemfile +3 -3
- data/Gemfile.lock +67 -17
- data/README.md +3 -3
- data/Rakefile +1 -0
- data/VERSION +1 -1
- data/slicker.gemspec +32 -31
- metadata +53 -40
checksums.yaml
ADDED
@@ -0,0 +1,7 @@
|
|
1
|
+
---
|
2
|
+
SHA1:
|
3
|
+
metadata.gz: bb53dfb02d0b575e6dc38d0f9d0a457366342b07
|
4
|
+
data.tar.gz: c62034f86f44740c2ce45d409e3c68e35f142ac5
|
5
|
+
SHA512:
|
6
|
+
metadata.gz: 42b1e2109f9ffeb87f7d6edae63eb3af2409fbfcb3d8db40fdda83fa50bd8a840715736663fc0a3a519775510e4e03372856263d16b0ef0569aad8d9c6bb6bad
|
7
|
+
data.tar.gz: ff43df3f7179194d5c1ed9e78d1e5213adbdbcae3d86a1362a49caa002396c82512eca584aa5686eb9d8f6d442599d546752a9e88bc654e61ff908fcc710411d
|
data/Gemfile
CHANGED
data/Gemfile.lock
CHANGED
@@ -1,30 +1,80 @@
|
|
1
1
|
GEM
|
2
2
|
remote: http://rubygems.org/
|
3
3
|
specs:
|
4
|
-
|
5
|
-
|
6
|
-
|
4
|
+
addressable (2.4.0)
|
5
|
+
builder (3.2.3)
|
6
|
+
crass (1.0.3)
|
7
|
+
descendants_tracker (0.0.4)
|
8
|
+
thread_safe (~> 0.3, >= 0.3.1)
|
9
|
+
docile (1.1.5)
|
10
|
+
faraday (0.9.2)
|
11
|
+
multipart-post (>= 1.2, < 3)
|
12
|
+
git (1.3.0)
|
13
|
+
github_api (0.16.0)
|
14
|
+
addressable (~> 2.4.0)
|
15
|
+
descendants_tracker (~> 0.0.4)
|
16
|
+
faraday (~> 0.8, < 0.10)
|
17
|
+
hashie (>= 3.4)
|
18
|
+
mime-types (>= 1.16, < 3.0)
|
19
|
+
oauth2 (~> 1.0)
|
20
|
+
hashie (3.5.7)
|
21
|
+
highline (1.7.10)
|
22
|
+
jeweler (2.3.9)
|
23
|
+
builder
|
24
|
+
bundler
|
7
25
|
git (>= 1.2.5)
|
26
|
+
github_api (~> 0.16.0)
|
27
|
+
highline (>= 1.6.15)
|
28
|
+
nokogiri (>= 1.5.10)
|
29
|
+
psych
|
8
30
|
rake
|
9
|
-
|
10
|
-
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
31
|
+
rdoc
|
32
|
+
semver2
|
33
|
+
json (2.1.0)
|
34
|
+
jwt (1.5.6)
|
35
|
+
mime-types (2.99.3)
|
36
|
+
mini_portile2 (2.3.0)
|
37
|
+
minitest (5.11.3)
|
38
|
+
multi_json (1.13.1)
|
39
|
+
multi_xml (0.6.0)
|
40
|
+
multipart-post (2.0.0)
|
41
|
+
nokogiri (1.8.2)
|
42
|
+
mini_portile2 (~> 2.3.0)
|
43
|
+
nokogumbo (1.5.0)
|
44
|
+
nokogiri
|
45
|
+
oauth2 (1.4.0)
|
46
|
+
faraday (>= 0.8, < 0.13)
|
47
|
+
jwt (~> 1.0)
|
48
|
+
multi_json (~> 1.3)
|
49
|
+
multi_xml (~> 0.5)
|
50
|
+
rack (>= 1.2, < 3)
|
51
|
+
psych (3.0.2)
|
52
|
+
rack (2.0.4)
|
53
|
+
rake (12.3.0)
|
54
|
+
rdoc (6.0.1)
|
55
|
+
sanitize (4.6.0)
|
56
|
+
crass (~> 1.0.2)
|
57
|
+
nokogiri (>= 1.4.4)
|
58
|
+
nokogumbo (~> 1.4)
|
59
|
+
semver2 (3.4.2)
|
60
|
+
simplecov (0.15.1)
|
61
|
+
docile (~> 1.1.0)
|
62
|
+
json (>= 1.8, < 3)
|
63
|
+
simplecov-html (~> 0.10.0)
|
64
|
+
simplecov-html (0.10.2)
|
65
|
+
thread_safe (0.3.6)
|
66
|
+
yard (0.9.12)
|
20
67
|
|
21
68
|
PLATFORMS
|
22
69
|
ruby
|
23
70
|
|
24
71
|
DEPENDENCIES
|
25
|
-
bundler (~> 1.0
|
26
|
-
jeweler
|
72
|
+
bundler (~> 1.0)
|
73
|
+
jeweler
|
27
74
|
minitest
|
28
75
|
sanitize
|
29
76
|
simplecov
|
30
|
-
yard (~> 0.
|
77
|
+
yard (~> 0.9.11)
|
78
|
+
|
79
|
+
BUNDLED WITH
|
80
|
+
1.16.1
|
data/README.md
CHANGED
@@ -5,7 +5,7 @@ It's raining XSS out there. Time for a slicker!
|
|
5
5
|
|
6
6
|
Simple XSS protection was a feature of some early Rails plugins, notably WhiteList and sanitize_params, which defended your application at the front door - the params hash, where you probably get most of your input.
|
7
7
|
|
8
|
-
This is a port of the basic sanitize_params strategy into gem format, and with no dependency on Rails - it will also work in Sinatra, Padrino, or a straight Ruby application.
|
8
|
+
This is a port of the basic sanitize_params strategy into gem format, and with no dependency on Rails - it will also work in Sinatra, Padrino, or a straight Ruby application.
|
9
9
|
|
10
10
|
Usage
|
11
11
|
=====
|
@@ -29,7 +29,7 @@ def protect_from_xss
|
|
29
29
|
end
|
30
30
|
```
|
31
31
|
|
32
|
-
Drop that in your ApplicationController (for Rails) or your app.rb file (Sinatra or Padrino), and you're done: all HTML will be stripped from all params hitting your application. Of course, the disadvantage of this is that all HTML will be stripped from all params hitting your application.
|
32
|
+
Drop that in your ApplicationController (for Rails) or your app.rb file (Sinatra or Padrino), and you're done: all HTML will be stripped from all params hitting your application. Of course, the disadvantage of this is that all HTML will be stripped from all params hitting your application.
|
33
33
|
|
34
34
|
You can loosen this up in several different ways.
|
35
35
|
|
@@ -55,5 +55,5 @@ Contributing to slicker
|
|
55
55
|
Copyright
|
56
56
|
=========
|
57
57
|
|
58
|
-
Copyright (c) 2012 [Dave Hrycyszyn](http://
|
58
|
+
Copyright (c) 2012-2018 [Dave Hrycyszyn](http://constructiveproof.com). See LICENSE.txt for further details.
|
59
59
|
|
data/Rakefile
CHANGED
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
0.
|
1
|
+
0.4.0
|
data/slicker.gemspec
CHANGED
@@ -2,16 +2,18 @@
|
|
2
2
|
# DO NOT EDIT THIS FILE DIRECTLY
|
3
3
|
# Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
|
4
4
|
# -*- encoding: utf-8 -*-
|
5
|
+
# stub: slicker 0.4.0 ruby lib
|
5
6
|
|
6
7
|
Gem::Specification.new do |s|
|
7
|
-
s.name = "slicker"
|
8
|
-
s.version = "0.
|
8
|
+
s.name = "slicker".freeze
|
9
|
+
s.version = "0.4.0"
|
9
10
|
|
10
|
-
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
11
|
-
s.
|
12
|
-
s.
|
13
|
-
s.
|
14
|
-
s.
|
11
|
+
s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
|
12
|
+
s.require_paths = ["lib".freeze]
|
13
|
+
s.authors = ["Dave Hrycyszyn".freeze]
|
14
|
+
s.date = "2018-02-12"
|
15
|
+
s.description = "It's raining XSS out there. Protect yourself with Slicker!".freeze
|
16
|
+
s.email = "dave.hrycyszyn@headlondon.com".freeze
|
15
17
|
s.extra_rdoc_files = [
|
16
18
|
"LICENSE.txt",
|
17
19
|
"README.md"
|
@@ -30,37 +32,36 @@ Gem::Specification.new do |s|
|
|
30
32
|
"test/test.watchr",
|
31
33
|
"test/test_slicker.rb"
|
32
34
|
]
|
33
|
-
s.homepage = "http://github.com/futurechimp/slicker"
|
34
|
-
s.licenses = ["MIT"]
|
35
|
-
s.
|
36
|
-
s.
|
37
|
-
s.summary = "Params sanitization for your Ruby application"
|
35
|
+
s.homepage = "http://github.com/futurechimp/slicker".freeze
|
36
|
+
s.licenses = ["MIT".freeze]
|
37
|
+
s.rubygems_version = "2.5.2".freeze
|
38
|
+
s.summary = "Params sanitization for your Ruby application".freeze
|
38
39
|
|
39
40
|
if s.respond_to? :specification_version then
|
40
|
-
s.specification_version =
|
41
|
+
s.specification_version = 4
|
41
42
|
|
42
43
|
if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
|
43
|
-
s.add_runtime_dependency(%q<sanitize
|
44
|
-
s.add_development_dependency(%q<minitest
|
45
|
-
s.add_development_dependency(%q<yard
|
46
|
-
s.add_development_dependency(%q<bundler
|
47
|
-
s.add_development_dependency(%q<jeweler
|
48
|
-
s.add_development_dependency(%q<simplecov
|
44
|
+
s.add_runtime_dependency(%q<sanitize>.freeze, [">= 0"])
|
45
|
+
s.add_development_dependency(%q<minitest>.freeze, [">= 0"])
|
46
|
+
s.add_development_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
47
|
+
s.add_development_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
48
|
+
s.add_development_dependency(%q<jeweler>.freeze, [">= 0"])
|
49
|
+
s.add_development_dependency(%q<simplecov>.freeze, [">= 0"])
|
49
50
|
else
|
50
|
-
s.add_dependency(%q<sanitize
|
51
|
-
s.add_dependency(%q<minitest
|
52
|
-
s.add_dependency(%q<yard
|
53
|
-
s.add_dependency(%q<bundler
|
54
|
-
s.add_dependency(%q<jeweler
|
55
|
-
s.add_dependency(%q<simplecov
|
51
|
+
s.add_dependency(%q<sanitize>.freeze, [">= 0"])
|
52
|
+
s.add_dependency(%q<minitest>.freeze, [">= 0"])
|
53
|
+
s.add_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
54
|
+
s.add_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
55
|
+
s.add_dependency(%q<jeweler>.freeze, [">= 0"])
|
56
|
+
s.add_dependency(%q<simplecov>.freeze, [">= 0"])
|
56
57
|
end
|
57
58
|
else
|
58
|
-
s.add_dependency(%q<sanitize
|
59
|
-
s.add_dependency(%q<minitest
|
60
|
-
s.add_dependency(%q<yard
|
61
|
-
s.add_dependency(%q<bundler
|
62
|
-
s.add_dependency(%q<jeweler
|
63
|
-
s.add_dependency(%q<simplecov
|
59
|
+
s.add_dependency(%q<sanitize>.freeze, [">= 0"])
|
60
|
+
s.add_dependency(%q<minitest>.freeze, [">= 0"])
|
61
|
+
s.add_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
62
|
+
s.add_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
63
|
+
s.add_dependency(%q<jeweler>.freeze, [">= 0"])
|
64
|
+
s.add_dependency(%q<simplecov>.freeze, [">= 0"])
|
64
65
|
end
|
65
66
|
end
|
66
67
|
|
metadata
CHANGED
@@ -1,82 +1,99 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: slicker
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
5
|
-
prerelease:
|
4
|
+
version: 0.4.0
|
6
5
|
platform: ruby
|
7
6
|
authors:
|
8
7
|
- Dave Hrycyszyn
|
9
8
|
autorequire:
|
10
9
|
bindir: bin
|
11
10
|
cert_chain: []
|
12
|
-
date:
|
11
|
+
date: 2018-02-12 00:00:00.000000000 Z
|
13
12
|
dependencies:
|
14
13
|
- !ruby/object:Gem::Dependency
|
15
14
|
name: sanitize
|
16
|
-
requirement:
|
17
|
-
none: false
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
18
16
|
requirements:
|
19
|
-
- -
|
17
|
+
- - ">="
|
20
18
|
- !ruby/object:Gem::Version
|
21
19
|
version: '0'
|
22
20
|
type: :runtime
|
23
21
|
prerelease: false
|
24
|
-
version_requirements:
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
23
|
+
requirements:
|
24
|
+
- - ">="
|
25
|
+
- !ruby/object:Gem::Version
|
26
|
+
version: '0'
|
25
27
|
- !ruby/object:Gem::Dependency
|
26
28
|
name: minitest
|
27
|
-
requirement:
|
28
|
-
none: false
|
29
|
+
requirement: !ruby/object:Gem::Requirement
|
29
30
|
requirements:
|
30
|
-
- -
|
31
|
+
- - ">="
|
31
32
|
- !ruby/object:Gem::Version
|
32
33
|
version: '0'
|
33
34
|
type: :development
|
34
35
|
prerelease: false
|
35
|
-
version_requirements:
|
36
|
+
version_requirements: !ruby/object:Gem::Requirement
|
37
|
+
requirements:
|
38
|
+
- - ">="
|
39
|
+
- !ruby/object:Gem::Version
|
40
|
+
version: '0'
|
36
41
|
- !ruby/object:Gem::Dependency
|
37
42
|
name: yard
|
38
|
-
requirement:
|
39
|
-
none: false
|
43
|
+
requirement: !ruby/object:Gem::Requirement
|
40
44
|
requirements:
|
41
|
-
- - ~>
|
45
|
+
- - "~>"
|
42
46
|
- !ruby/object:Gem::Version
|
43
|
-
version: 0.
|
47
|
+
version: 0.9.11
|
44
48
|
type: :development
|
45
49
|
prerelease: false
|
46
|
-
version_requirements:
|
50
|
+
version_requirements: !ruby/object:Gem::Requirement
|
51
|
+
requirements:
|
52
|
+
- - "~>"
|
53
|
+
- !ruby/object:Gem::Version
|
54
|
+
version: 0.9.11
|
47
55
|
- !ruby/object:Gem::Dependency
|
48
56
|
name: bundler
|
49
|
-
requirement:
|
50
|
-
none: false
|
57
|
+
requirement: !ruby/object:Gem::Requirement
|
51
58
|
requirements:
|
52
|
-
- - ~>
|
59
|
+
- - "~>"
|
53
60
|
- !ruby/object:Gem::Version
|
54
|
-
version: 1.0
|
61
|
+
version: '1.0'
|
55
62
|
type: :development
|
56
63
|
prerelease: false
|
57
|
-
version_requirements:
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
65
|
+
requirements:
|
66
|
+
- - "~>"
|
67
|
+
- !ruby/object:Gem::Version
|
68
|
+
version: '1.0'
|
58
69
|
- !ruby/object:Gem::Dependency
|
59
70
|
name: jeweler
|
60
|
-
requirement:
|
61
|
-
none: false
|
71
|
+
requirement: !ruby/object:Gem::Requirement
|
62
72
|
requirements:
|
63
|
-
- -
|
73
|
+
- - ">="
|
64
74
|
- !ruby/object:Gem::Version
|
65
|
-
version:
|
75
|
+
version: '0'
|
66
76
|
type: :development
|
67
77
|
prerelease: false
|
68
|
-
version_requirements:
|
78
|
+
version_requirements: !ruby/object:Gem::Requirement
|
79
|
+
requirements:
|
80
|
+
- - ">="
|
81
|
+
- !ruby/object:Gem::Version
|
82
|
+
version: '0'
|
69
83
|
- !ruby/object:Gem::Dependency
|
70
84
|
name: simplecov
|
71
|
-
requirement:
|
72
|
-
none: false
|
85
|
+
requirement: !ruby/object:Gem::Requirement
|
73
86
|
requirements:
|
74
|
-
- -
|
87
|
+
- - ">="
|
75
88
|
- !ruby/object:Gem::Version
|
76
89
|
version: '0'
|
77
90
|
type: :development
|
78
91
|
prerelease: false
|
79
|
-
version_requirements:
|
92
|
+
version_requirements: !ruby/object:Gem::Requirement
|
93
|
+
requirements:
|
94
|
+
- - ">="
|
95
|
+
- !ruby/object:Gem::Version
|
96
|
+
version: '0'
|
80
97
|
description: It's raining XSS out there. Protect yourself with Slicker!
|
81
98
|
email: dave.hrycyszyn@headlondon.com
|
82
99
|
executables: []
|
@@ -85,7 +102,7 @@ extra_rdoc_files:
|
|
85
102
|
- LICENSE.txt
|
86
103
|
- README.md
|
87
104
|
files:
|
88
|
-
- .document
|
105
|
+
- ".document"
|
89
106
|
- Gemfile
|
90
107
|
- Gemfile.lock
|
91
108
|
- LICENSE.txt
|
@@ -100,29 +117,25 @@ files:
|
|
100
117
|
homepage: http://github.com/futurechimp/slicker
|
101
118
|
licenses:
|
102
119
|
- MIT
|
120
|
+
metadata: {}
|
103
121
|
post_install_message:
|
104
122
|
rdoc_options: []
|
105
123
|
require_paths:
|
106
124
|
- lib
|
107
125
|
required_ruby_version: !ruby/object:Gem::Requirement
|
108
|
-
none: false
|
109
126
|
requirements:
|
110
|
-
- -
|
127
|
+
- - ">="
|
111
128
|
- !ruby/object:Gem::Version
|
112
129
|
version: '0'
|
113
|
-
segments:
|
114
|
-
- 0
|
115
|
-
hash: -175340966913150793
|
116
130
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
117
|
-
none: false
|
118
131
|
requirements:
|
119
|
-
- -
|
132
|
+
- - ">="
|
120
133
|
- !ruby/object:Gem::Version
|
121
134
|
version: '0'
|
122
135
|
requirements: []
|
123
136
|
rubyforge_project:
|
124
|
-
rubygems_version:
|
137
|
+
rubygems_version: 2.5.2
|
125
138
|
signing_key:
|
126
|
-
specification_version:
|
139
|
+
specification_version: 4
|
127
140
|
summary: Params sanitization for your Ruby application
|
128
141
|
test_files: []
|