slicker 0.3.2 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/Gemfile +3 -3
- data/Gemfile.lock +67 -17
- data/README.md +3 -3
- data/Rakefile +1 -0
- data/VERSION +1 -1
- data/slicker.gemspec +32 -31
- metadata +53 -40
checksums.yaml
ADDED
@@ -0,0 +1,7 @@
|
|
1
|
+
---
|
2
|
+
SHA1:
|
3
|
+
metadata.gz: bb53dfb02d0b575e6dc38d0f9d0a457366342b07
|
4
|
+
data.tar.gz: c62034f86f44740c2ce45d409e3c68e35f142ac5
|
5
|
+
SHA512:
|
6
|
+
metadata.gz: 42b1e2109f9ffeb87f7d6edae63eb3af2409fbfcb3d8db40fdda83fa50bd8a840715736663fc0a3a519775510e4e03372856263d16b0ef0569aad8d9c6bb6bad
|
7
|
+
data.tar.gz: ff43df3f7179194d5c1ed9e78d1e5213adbdbcae3d86a1362a49caa002396c82512eca584aa5686eb9d8f6d442599d546752a9e88bc654e61ff908fcc710411d
|
data/Gemfile
CHANGED
data/Gemfile.lock
CHANGED
@@ -1,30 +1,80 @@
|
|
1
1
|
GEM
|
2
2
|
remote: http://rubygems.org/
|
3
3
|
specs:
|
4
|
-
|
5
|
-
|
6
|
-
|
4
|
+
addressable (2.4.0)
|
5
|
+
builder (3.2.3)
|
6
|
+
crass (1.0.3)
|
7
|
+
descendants_tracker (0.0.4)
|
8
|
+
thread_safe (~> 0.3, >= 0.3.1)
|
9
|
+
docile (1.1.5)
|
10
|
+
faraday (0.9.2)
|
11
|
+
multipart-post (>= 1.2, < 3)
|
12
|
+
git (1.3.0)
|
13
|
+
github_api (0.16.0)
|
14
|
+
addressable (~> 2.4.0)
|
15
|
+
descendants_tracker (~> 0.0.4)
|
16
|
+
faraday (~> 0.8, < 0.10)
|
17
|
+
hashie (>= 3.4)
|
18
|
+
mime-types (>= 1.16, < 3.0)
|
19
|
+
oauth2 (~> 1.0)
|
20
|
+
hashie (3.5.7)
|
21
|
+
highline (1.7.10)
|
22
|
+
jeweler (2.3.9)
|
23
|
+
builder
|
24
|
+
bundler
|
7
25
|
git (>= 1.2.5)
|
26
|
+
github_api (~> 0.16.0)
|
27
|
+
highline (>= 1.6.15)
|
28
|
+
nokogiri (>= 1.5.10)
|
29
|
+
psych
|
8
30
|
rake
|
9
|
-
|
10
|
-
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
31
|
+
rdoc
|
32
|
+
semver2
|
33
|
+
json (2.1.0)
|
34
|
+
jwt (1.5.6)
|
35
|
+
mime-types (2.99.3)
|
36
|
+
mini_portile2 (2.3.0)
|
37
|
+
minitest (5.11.3)
|
38
|
+
multi_json (1.13.1)
|
39
|
+
multi_xml (0.6.0)
|
40
|
+
multipart-post (2.0.0)
|
41
|
+
nokogiri (1.8.2)
|
42
|
+
mini_portile2 (~> 2.3.0)
|
43
|
+
nokogumbo (1.5.0)
|
44
|
+
nokogiri
|
45
|
+
oauth2 (1.4.0)
|
46
|
+
faraday (>= 0.8, < 0.13)
|
47
|
+
jwt (~> 1.0)
|
48
|
+
multi_json (~> 1.3)
|
49
|
+
multi_xml (~> 0.5)
|
50
|
+
rack (>= 1.2, < 3)
|
51
|
+
psych (3.0.2)
|
52
|
+
rack (2.0.4)
|
53
|
+
rake (12.3.0)
|
54
|
+
rdoc (6.0.1)
|
55
|
+
sanitize (4.6.0)
|
56
|
+
crass (~> 1.0.2)
|
57
|
+
nokogiri (>= 1.4.4)
|
58
|
+
nokogumbo (~> 1.4)
|
59
|
+
semver2 (3.4.2)
|
60
|
+
simplecov (0.15.1)
|
61
|
+
docile (~> 1.1.0)
|
62
|
+
json (>= 1.8, < 3)
|
63
|
+
simplecov-html (~> 0.10.0)
|
64
|
+
simplecov-html (0.10.2)
|
65
|
+
thread_safe (0.3.6)
|
66
|
+
yard (0.9.12)
|
20
67
|
|
21
68
|
PLATFORMS
|
22
69
|
ruby
|
23
70
|
|
24
71
|
DEPENDENCIES
|
25
|
-
bundler (~> 1.0
|
26
|
-
jeweler
|
72
|
+
bundler (~> 1.0)
|
73
|
+
jeweler
|
27
74
|
minitest
|
28
75
|
sanitize
|
29
76
|
simplecov
|
30
|
-
yard (~> 0.
|
77
|
+
yard (~> 0.9.11)
|
78
|
+
|
79
|
+
BUNDLED WITH
|
80
|
+
1.16.1
|
data/README.md
CHANGED
@@ -5,7 +5,7 @@ It's raining XSS out there. Time for a slicker!
|
|
5
5
|
|
6
6
|
Simple XSS protection was a feature of some early Rails plugins, notably WhiteList and sanitize_params, which defended your application at the front door - the params hash, where you probably get most of your input.
|
7
7
|
|
8
|
-
This is a port of the basic sanitize_params strategy into gem format, and with no dependency on Rails - it will also work in Sinatra, Padrino, or a straight Ruby application.
|
8
|
+
This is a port of the basic sanitize_params strategy into gem format, and with no dependency on Rails - it will also work in Sinatra, Padrino, or a straight Ruby application.
|
9
9
|
|
10
10
|
Usage
|
11
11
|
=====
|
@@ -29,7 +29,7 @@ def protect_from_xss
|
|
29
29
|
end
|
30
30
|
```
|
31
31
|
|
32
|
-
Drop that in your ApplicationController (for Rails) or your app.rb file (Sinatra or Padrino), and you're done: all HTML will be stripped from all params hitting your application. Of course, the disadvantage of this is that all HTML will be stripped from all params hitting your application.
|
32
|
+
Drop that in your ApplicationController (for Rails) or your app.rb file (Sinatra or Padrino), and you're done: all HTML will be stripped from all params hitting your application. Of course, the disadvantage of this is that all HTML will be stripped from all params hitting your application.
|
33
33
|
|
34
34
|
You can loosen this up in several different ways.
|
35
35
|
|
@@ -55,5 +55,5 @@ Contributing to slicker
|
|
55
55
|
Copyright
|
56
56
|
=========
|
57
57
|
|
58
|
-
Copyright (c) 2012 [Dave Hrycyszyn](http://
|
58
|
+
Copyright (c) 2012-2018 [Dave Hrycyszyn](http://constructiveproof.com). See LICENSE.txt for further details.
|
59
59
|
|
data/Rakefile
CHANGED
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
0.
|
1
|
+
0.4.0
|
data/slicker.gemspec
CHANGED
@@ -2,16 +2,18 @@
|
|
2
2
|
# DO NOT EDIT THIS FILE DIRECTLY
|
3
3
|
# Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
|
4
4
|
# -*- encoding: utf-8 -*-
|
5
|
+
# stub: slicker 0.4.0 ruby lib
|
5
6
|
|
6
7
|
Gem::Specification.new do |s|
|
7
|
-
s.name = "slicker"
|
8
|
-
s.version = "0.
|
8
|
+
s.name = "slicker".freeze
|
9
|
+
s.version = "0.4.0"
|
9
10
|
|
10
|
-
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
11
|
-
s.
|
12
|
-
s.
|
13
|
-
s.
|
14
|
-
s.
|
11
|
+
s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
|
12
|
+
s.require_paths = ["lib".freeze]
|
13
|
+
s.authors = ["Dave Hrycyszyn".freeze]
|
14
|
+
s.date = "2018-02-12"
|
15
|
+
s.description = "It's raining XSS out there. Protect yourself with Slicker!".freeze
|
16
|
+
s.email = "dave.hrycyszyn@headlondon.com".freeze
|
15
17
|
s.extra_rdoc_files = [
|
16
18
|
"LICENSE.txt",
|
17
19
|
"README.md"
|
@@ -30,37 +32,36 @@ Gem::Specification.new do |s|
|
|
30
32
|
"test/test.watchr",
|
31
33
|
"test/test_slicker.rb"
|
32
34
|
]
|
33
|
-
s.homepage = "http://github.com/futurechimp/slicker"
|
34
|
-
s.licenses = ["MIT"]
|
35
|
-
s.
|
36
|
-
s.
|
37
|
-
s.summary = "Params sanitization for your Ruby application"
|
35
|
+
s.homepage = "http://github.com/futurechimp/slicker".freeze
|
36
|
+
s.licenses = ["MIT".freeze]
|
37
|
+
s.rubygems_version = "2.5.2".freeze
|
38
|
+
s.summary = "Params sanitization for your Ruby application".freeze
|
38
39
|
|
39
40
|
if s.respond_to? :specification_version then
|
40
|
-
s.specification_version =
|
41
|
+
s.specification_version = 4
|
41
42
|
|
42
43
|
if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
|
43
|
-
s.add_runtime_dependency(%q<sanitize
|
44
|
-
s.add_development_dependency(%q<minitest
|
45
|
-
s.add_development_dependency(%q<yard
|
46
|
-
s.add_development_dependency(%q<bundler
|
47
|
-
s.add_development_dependency(%q<jeweler
|
48
|
-
s.add_development_dependency(%q<simplecov
|
44
|
+
s.add_runtime_dependency(%q<sanitize>.freeze, [">= 0"])
|
45
|
+
s.add_development_dependency(%q<minitest>.freeze, [">= 0"])
|
46
|
+
s.add_development_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
47
|
+
s.add_development_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
48
|
+
s.add_development_dependency(%q<jeweler>.freeze, [">= 0"])
|
49
|
+
s.add_development_dependency(%q<simplecov>.freeze, [">= 0"])
|
49
50
|
else
|
50
|
-
s.add_dependency(%q<sanitize
|
51
|
-
s.add_dependency(%q<minitest
|
52
|
-
s.add_dependency(%q<yard
|
53
|
-
s.add_dependency(%q<bundler
|
54
|
-
s.add_dependency(%q<jeweler
|
55
|
-
s.add_dependency(%q<simplecov
|
51
|
+
s.add_dependency(%q<sanitize>.freeze, [">= 0"])
|
52
|
+
s.add_dependency(%q<minitest>.freeze, [">= 0"])
|
53
|
+
s.add_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
54
|
+
s.add_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
55
|
+
s.add_dependency(%q<jeweler>.freeze, [">= 0"])
|
56
|
+
s.add_dependency(%q<simplecov>.freeze, [">= 0"])
|
56
57
|
end
|
57
58
|
else
|
58
|
-
s.add_dependency(%q<sanitize
|
59
|
-
s.add_dependency(%q<minitest
|
60
|
-
s.add_dependency(%q<yard
|
61
|
-
s.add_dependency(%q<bundler
|
62
|
-
s.add_dependency(%q<jeweler
|
63
|
-
s.add_dependency(%q<simplecov
|
59
|
+
s.add_dependency(%q<sanitize>.freeze, [">= 0"])
|
60
|
+
s.add_dependency(%q<minitest>.freeze, [">= 0"])
|
61
|
+
s.add_dependency(%q<yard>.freeze, ["~> 0.9.11"])
|
62
|
+
s.add_dependency(%q<bundler>.freeze, ["~> 1.0"])
|
63
|
+
s.add_dependency(%q<jeweler>.freeze, [">= 0"])
|
64
|
+
s.add_dependency(%q<simplecov>.freeze, [">= 0"])
|
64
65
|
end
|
65
66
|
end
|
66
67
|
|
metadata
CHANGED
@@ -1,82 +1,99 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: slicker
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
5
|
-
prerelease:
|
4
|
+
version: 0.4.0
|
6
5
|
platform: ruby
|
7
6
|
authors:
|
8
7
|
- Dave Hrycyszyn
|
9
8
|
autorequire:
|
10
9
|
bindir: bin
|
11
10
|
cert_chain: []
|
12
|
-
date:
|
11
|
+
date: 2018-02-12 00:00:00.000000000 Z
|
13
12
|
dependencies:
|
14
13
|
- !ruby/object:Gem::Dependency
|
15
14
|
name: sanitize
|
16
|
-
requirement:
|
17
|
-
none: false
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
18
16
|
requirements:
|
19
|
-
- -
|
17
|
+
- - ">="
|
20
18
|
- !ruby/object:Gem::Version
|
21
19
|
version: '0'
|
22
20
|
type: :runtime
|
23
21
|
prerelease: false
|
24
|
-
version_requirements:
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
23
|
+
requirements:
|
24
|
+
- - ">="
|
25
|
+
- !ruby/object:Gem::Version
|
26
|
+
version: '0'
|
25
27
|
- !ruby/object:Gem::Dependency
|
26
28
|
name: minitest
|
27
|
-
requirement:
|
28
|
-
none: false
|
29
|
+
requirement: !ruby/object:Gem::Requirement
|
29
30
|
requirements:
|
30
|
-
- -
|
31
|
+
- - ">="
|
31
32
|
- !ruby/object:Gem::Version
|
32
33
|
version: '0'
|
33
34
|
type: :development
|
34
35
|
prerelease: false
|
35
|
-
version_requirements:
|
36
|
+
version_requirements: !ruby/object:Gem::Requirement
|
37
|
+
requirements:
|
38
|
+
- - ">="
|
39
|
+
- !ruby/object:Gem::Version
|
40
|
+
version: '0'
|
36
41
|
- !ruby/object:Gem::Dependency
|
37
42
|
name: yard
|
38
|
-
requirement:
|
39
|
-
none: false
|
43
|
+
requirement: !ruby/object:Gem::Requirement
|
40
44
|
requirements:
|
41
|
-
- - ~>
|
45
|
+
- - "~>"
|
42
46
|
- !ruby/object:Gem::Version
|
43
|
-
version: 0.
|
47
|
+
version: 0.9.11
|
44
48
|
type: :development
|
45
49
|
prerelease: false
|
46
|
-
version_requirements:
|
50
|
+
version_requirements: !ruby/object:Gem::Requirement
|
51
|
+
requirements:
|
52
|
+
- - "~>"
|
53
|
+
- !ruby/object:Gem::Version
|
54
|
+
version: 0.9.11
|
47
55
|
- !ruby/object:Gem::Dependency
|
48
56
|
name: bundler
|
49
|
-
requirement:
|
50
|
-
none: false
|
57
|
+
requirement: !ruby/object:Gem::Requirement
|
51
58
|
requirements:
|
52
|
-
- - ~>
|
59
|
+
- - "~>"
|
53
60
|
- !ruby/object:Gem::Version
|
54
|
-
version: 1.0
|
61
|
+
version: '1.0'
|
55
62
|
type: :development
|
56
63
|
prerelease: false
|
57
|
-
version_requirements:
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
65
|
+
requirements:
|
66
|
+
- - "~>"
|
67
|
+
- !ruby/object:Gem::Version
|
68
|
+
version: '1.0'
|
58
69
|
- !ruby/object:Gem::Dependency
|
59
70
|
name: jeweler
|
60
|
-
requirement:
|
61
|
-
none: false
|
71
|
+
requirement: !ruby/object:Gem::Requirement
|
62
72
|
requirements:
|
63
|
-
- -
|
73
|
+
- - ">="
|
64
74
|
- !ruby/object:Gem::Version
|
65
|
-
version:
|
75
|
+
version: '0'
|
66
76
|
type: :development
|
67
77
|
prerelease: false
|
68
|
-
version_requirements:
|
78
|
+
version_requirements: !ruby/object:Gem::Requirement
|
79
|
+
requirements:
|
80
|
+
- - ">="
|
81
|
+
- !ruby/object:Gem::Version
|
82
|
+
version: '0'
|
69
83
|
- !ruby/object:Gem::Dependency
|
70
84
|
name: simplecov
|
71
|
-
requirement:
|
72
|
-
none: false
|
85
|
+
requirement: !ruby/object:Gem::Requirement
|
73
86
|
requirements:
|
74
|
-
- -
|
87
|
+
- - ">="
|
75
88
|
- !ruby/object:Gem::Version
|
76
89
|
version: '0'
|
77
90
|
type: :development
|
78
91
|
prerelease: false
|
79
|
-
version_requirements:
|
92
|
+
version_requirements: !ruby/object:Gem::Requirement
|
93
|
+
requirements:
|
94
|
+
- - ">="
|
95
|
+
- !ruby/object:Gem::Version
|
96
|
+
version: '0'
|
80
97
|
description: It's raining XSS out there. Protect yourself with Slicker!
|
81
98
|
email: dave.hrycyszyn@headlondon.com
|
82
99
|
executables: []
|
@@ -85,7 +102,7 @@ extra_rdoc_files:
|
|
85
102
|
- LICENSE.txt
|
86
103
|
- README.md
|
87
104
|
files:
|
88
|
-
- .document
|
105
|
+
- ".document"
|
89
106
|
- Gemfile
|
90
107
|
- Gemfile.lock
|
91
108
|
- LICENSE.txt
|
@@ -100,29 +117,25 @@ files:
|
|
100
117
|
homepage: http://github.com/futurechimp/slicker
|
101
118
|
licenses:
|
102
119
|
- MIT
|
120
|
+
metadata: {}
|
103
121
|
post_install_message:
|
104
122
|
rdoc_options: []
|
105
123
|
require_paths:
|
106
124
|
- lib
|
107
125
|
required_ruby_version: !ruby/object:Gem::Requirement
|
108
|
-
none: false
|
109
126
|
requirements:
|
110
|
-
- -
|
127
|
+
- - ">="
|
111
128
|
- !ruby/object:Gem::Version
|
112
129
|
version: '0'
|
113
|
-
segments:
|
114
|
-
- 0
|
115
|
-
hash: -175340966913150793
|
116
130
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
117
|
-
none: false
|
118
131
|
requirements:
|
119
|
-
- -
|
132
|
+
- - ">="
|
120
133
|
- !ruby/object:Gem::Version
|
121
134
|
version: '0'
|
122
135
|
requirements: []
|
123
136
|
rubyforge_project:
|
124
|
-
rubygems_version:
|
137
|
+
rubygems_version: 2.5.2
|
125
138
|
signing_key:
|
126
|
-
specification_version:
|
139
|
+
specification_version: 4
|
127
140
|
summary: Params sanitization for your Ruby application
|
128
141
|
test_files: []
|