stay 0.1.4.1 → 0.1.4.2

data/README.md

@@ -161,6 +161,9 @@ Example of complete use:
   end
 ```
 
+### Sanitize
+Since version 0.1.4.1, **Stay** only accept this tags %w(p strong em span ul li ol)
+
 ## Changelog
 Just some good releases changelog:
 
@@ -176,4 +179,4 @@ Just some good releases changelog:
   - Add error callback to the JSON
 
   **v0.1.0.0**
-  - Initial release, February 4th 2012
+  - Initial release, February 4th 2012

data/Rakefile

@@ -2,7 +2,7 @@ require 'rubygems'
 require 'rake'
 require 'echoe'
 
-Echoe.new('stay', '0.1.4.1') do |p|
+Echoe.new('stay', '0.1.4.2') do |p|
   p.description     = "Form ajax helper with tinymce support"
   p.summary         = "Helper for building ajax form, inspired by best_in_place, with some modifications, support tinymce as editor"
   p.url             = "http://github.com/tejanium/stay"

data/lib/stay/controller_extensions.rb

@@ -7,13 +7,13 @@ module Stay
     private
       def response_ok(obj)
         field = params[obj.class.to_s.underscore].keys.first
-        value = obj.send(field.to_sym)
+        value = ActionController::Base.helpers.sanitize(obj.send(field.to_sym), tags: %w(p strong em span ul li ol))
         render json: { :display => (value.nil? ? "-" : value.to_html), :input => value }, status: :ok
       end
 
       def response_error(obj)
         field = params[obj.class.to_s.underscore].keys.first
-        value = obj.send("#{field}_was".to_sym)
+        value = ActionController::Base.helpers.sanitize(obj.send("#{field}_was".to_sym), tags: %w(p strong em span ul li ol))
         render json: { :display => (value.nil? ? "-" : value.to_html), :input => value, :errors => obj.errors }, status: :unprocessable_entity
       end
   end

data/lib/stay/helper.rb

@@ -20,7 +20,7 @@ module Stay
   end
 
   ActionView::Helpers::FormHelper.send(:include, FormHelper)
-
+  
   module StayHelpers
     def stay(record, field, opts = {})
       raise ArgumentError, "Can't have Canceller without Submitter" if opts[:canceller] && opts[:submitter].nil?
@@ -37,7 +37,7 @@ module Stay
           if val.nil?
             html << "-"
           else
-            html << val.to_html
+            html << sanitize(val, tags: %w(p strong em span ul li ol)).to_html
           end
         html << "</span>"
         html << "<span class='stay-form' style='display:none'>"
@@ -48,3 +48,4 @@ module Stay
     end
   end
 end
+

data/stay.gemspec

@@ -2,11 +2,11 @@
 
 Gem::Specification.new do |s|
   s.name = "stay"
-  s.version = "0.1.4.1"
+  s.version = "0.1.4.2"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
   s.authors = ["Teja Sophista"]
-  s.date = "2012-03-12"
+  s.date = "2012-03-15"
   s.description = "Form ajax helper with tinymce support"
   s.email = "tejanium@yahoo.com"
   s.extra_rdoc_files = ["README.md", "README.rdoc", "lib/assets/javascripts/stay.js", "lib/stay.rb", "lib/stay/controller_extensions.rb", "lib/stay/engine.rb", "lib/stay/helper.rb", "lib/stay/string_extensions.rb"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: stay
 version: !ruby/object:Gem::Version
-  version: 0.1.4.1
+  version: 0.1.4.2
   prerelease: 
 platform: ruby
 authors:
@@ -9,11 +9,11 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-03-12 00:00:00.000000000Z
+date: 2012-03-15 00:00:00.000000000Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jquery-rails
-  requirement: &28151000 !ruby/object:Gem::Requirement
+  requirement: &12364280 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -21,10 +21,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *28151000
+  version_requirements: *12364280
 - !ruby/object:Gem::Dependency
   name: tinymce-rails
-  requirement: &28183420 !ruby/object:Gem::Requirement
+  requirement: &12363820 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -32,7 +32,7 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *28183420
+  version_requirements: *12363820
 description: Form ajax helper with tinymce support
 email: tejanium@yahoo.com
 executables: []