string_master 0.3.12 → 0.3.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: bbb2c262852624eb1084671025dcf196f3ddf143
-  data.tar.gz: 46b91478574a81dc5ec53ef51a4a33334187cd82
+  metadata.gz: 0ddc96955a4fbb5d2f038d2169fcd6527ebc9ade
+  data.tar.gz: 268f5e7db463abf408eb47c555fc74c32a04839b
 SHA512:
-  metadata.gz: 797839b723b19544d281b1969a95535d076dc86d78d3abded0fc3355387820fe3a2e33233ce11dded67b9070d4474c0bd7b3c5d2eb7904ac322f69482516e9ef
-  data.tar.gz: 1b540de62175c407b36f1c197793f47f2e5610ef76e4f7fe79143f243869d8ec8e093a34afbc5df9d493158034750c1da2f0cf1a4f97abb3d2fcfc923d318423
+  metadata.gz: 736856a5fd9f19796f0ab76d14d8528b45a20340b5e0838daaf15e4819f4129aa379d432a8004d7081a2209a1124b73b56db651f8fa566da5f710e88502c5f66
+  data.tar.gz: 6ccfda23f78dc34d737132b4f64b1709c5a6e2cc44f9d1dc40bf5ac49896a04f146f2fcdefca28efc389a31695b30fe95cb5d6cf15a2d80e5f496e16cee4955b

data/VERSION

@@ -1 +1 @@
-0.3.12
+0.3.13

data/lib/string_master/string_master.rb

@@ -33,13 +33,17 @@ class StringMaster
   def html_escape(options={})
     except = options[:except] || %w()
     close_tags
-    @modified_string.gsub!(/<\/?([a-zA-Z0-9]*?)(\s[^>]*?)?>/) do |tag|
+    puts "---------"
+    p @modified_string
+    @modified_string.gsub!(/<\/?([^<]*?)(\s[^>]*?)?>/) do |tag|
       if except.include?($1)
+        puts "#{$1} exception! - matches one of #{except}"
         # sanitize attributes
         tag.gsub(/\s(.+?)=('|").*?\2(?=.*?>)/) do |a|
           ["href", "src", "lang"].include?($1) ? a : ""
         end
       else
+        puts "#{$1} - sanitizing!"
         h(tag)
       end
     end

data/spec/lib/string_master/string_master_spec.rb

@@ -16,6 +16,12 @@ describe StringMaster do
     parser.html_escape(:except => %w(a)).to_s.should == '<a href="http://google.com">hello</a> &lt;b&gt;world&lt;/b&gt;'
     parser = StringMaster.new('<a href="https://google.com">hello</a> <b>world</b>')
     parser.html_escape(:except => %w(a)).to_s.should == '<a href="https://google.com">hello</a> &lt;b&gt;world&lt;/b&gt;'
+
+    parser = StringMaster.new('xsstest<input/onfocus=prompt(document.cookie) autofocus>')
+    parser.html_escape.to_s.should == 'xsstest&lt;input/onfocus=prompt(document.cookie) autofocus&gt;'
+
+    parser = StringMaster.new('xsstest<input/onfocus=prompt(document.cookie)autofocus>')
+    parser.html_escape.to_s.should == 'xsstest&lt;input/onfocus=prompt(document.cookie)autofocus&gt;'
   end
 
   it "makes images of urls that end with .jpg and other image extensions" do

data/string_master.gemspec

@@ -2,16 +2,16 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
-# stub: string_master 0.3.11 ruby lib
+# stub: string_master 0.3.13 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "string_master"
-  s.version = "0.3.12"
+  s.version = "0.3.13"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib"]
   s.authors = ["Roman Snitko"]
-  s.date = "2015-08-18"
+  s.date = "2017-04-20"
   s.description = "Because every time I create a new webapp, I think about how I should process user-generated content. Should convert urls to links and images? Should I allow certain tags? Should I convert all new lines to *br* tags? Well, now all that is as simple as calling a single method."
   s.email = "roman.snitko@gmail.com"
   s.extra_rdoc_files = [
@@ -38,7 +38,7 @@ Gem::Specification.new do |s|
   ]
   s.homepage = "http://github.com/snitko/string_master"
   s.licenses = ["MIT"]
-  s.rubygems_version = "2.4.5"
+  s.rubygems_version = "2.5.1"
   s.summary = "Most common string manipulations for a webapp"
 
   if s.respond_to? :specification_version then
@@ -46,19 +46,19 @@ Gem::Specification.new do |s|
 
     if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
       s.add_runtime_dependency(%q<actionpack>, [">= 0"])
-      s.add_development_dependency(%q<bundler>, [">= 0"])
-      s.add_development_dependency(%q<jeweler>, [">= 0"])
+      s.add_development_dependency(%q<bundler>, ["~> 1.0"])
+      s.add_development_dependency(%q<jeweler>, ["~> 2.3.4"])
       s.add_development_dependency(%q<rspec>, [">= 0"])
     else
       s.add_dependency(%q<actionpack>, [">= 0"])
-      s.add_dependency(%q<bundler>, [">= 0"])
-      s.add_dependency(%q<jeweler>, [">= 0"])
+      s.add_dependency(%q<bundler>, ["~> 1.0"])
+      s.add_dependency(%q<jeweler>, ["~> 2.3.4"])
       s.add_dependency(%q<rspec>, [">= 0"])
     end
   else
     s.add_dependency(%q<actionpack>, [">= 0"])
-    s.add_dependency(%q<bundler>, [">= 0"])
-    s.add_dependency(%q<jeweler>, [">= 0"])
+    s.add_dependency(%q<bundler>, ["~> 1.0"])
+    s.add_dependency(%q<jeweler>, ["~> 2.3.4"])
     s.add_dependency(%q<rspec>, [">= 0"])
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: string_master
 version: !ruby/object:Gem::Version
-  version: 0.3.12
+  version: 0.3.13
 platform: ruby
 authors:
 - Roman Snitko
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-03-05 00:00:00.000000000 Z
+date: 2017-04-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: actionpack