string_tools 1.0.0 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2512a1b983589c7d296ca42a9931209e01b5df52ca1c8e303886cade92c44e04
-  data.tar.gz: 3cea7ab525f3d9e0bf3630f22831634639a13b03cd8fb62a9895f48e59333a00
+  metadata.gz: 88f90e3bdd0d61cd67452b28d2d282d3ef821d48785143d750c72998655e1ff5
+  data.tar.gz: efd190d4215b001ac24260e1ddd1bf6024a3653acbb4060e8da082b85659c76b
 SHA512:
-  metadata.gz: 0abeee9ce1ea2830119b0c8e3c2d1949ceb85c9a78b50bf57d84eda95d29fa27f3257610292152b15c456ae952e5daf24968b5b48a585103164f4bc84da01674
-  data.tar.gz: 7e27bd1d98036d5340a2a53693ffaa832e0fd24f52365578f95114e7cadebc9da2dae5ca7ad71b2ceef64bb969424a0c2e0a27038d4a8bf1bebaf4eedd584c30
+  metadata.gz: f45484316664f0c72a655a25aa590064585096bbf99823b9068ab63d34b2c7b521b8fbab3b228e8a9ec113546b0919e8bebe97fce9a4e2d7f9dc1d02dd33249f
+  data.tar.gz: 00d4e2fe764500b8bb3fb1520a24d20d3dc59c99802178effb925b67906d45da67541fc2be34b506d4ef4e5e57862886de1fe01d43e7382a90cf9e5b6de7de92

data/CHANGELOG.md

@@ -1,4 +1,25 @@
-# v1.0.0
+# v1.2.0
+
+* 2024-04-08 [be7e7fd](../../commit/be7e7fd) - __(Andrew N. Shalaev)__ Release v1.2.0 
+* 2023-11-29 [393bb13](../../commit/393bb13) - __(GIGrave)__ feature: add media to sanitize rules 
+https://jira.railsc.ru/browse/BPC-22916
+
+* 2023-11-29 [06eb51e](../../commit/06eb51e) - __(GIGrave)__ Revert "feature: add string_tools config" 
+This reverts commit c0b9bf39ec3cf2fce28fe92c7892a0c47593ca09.
+
+* 2023-11-29 [d1c00b9](../../commit/d1c00b9) - __(GIGrave)__ Revert "fix: add postgress to drone" 
+This reverts commit 33e5698fd48d5edf416df316e3466f9e6c58369f.
+
+* 2023-11-02 [33e5698](../../commit/33e5698) - __(GIGrave)__ fix: add postgress to drone 
+* 2023-11-02 [c0b9bf3](../../commit/c0b9bf3) - __(GIGrave)__ feature: add string_tools config 
+https://jira.railsc.ru/browse/BPC-22612
+
+* 2023-10-16 [8ccb54a](../../commit/8ccb54a) - __(ArtemBorodinEvgenyevich)__ Release v1.1.0 
+* 2023-08-29 [bed389b](../../commit/bed389b) - __(Terentev Aleksey)__ feat: sanitize links in alt of img tag 
+https://jira.railsc.ru/browse/PC4-29908
+
+* 2023-08-11 [7848491](../../commit/7848491) - __(Terentev Aleksey)__ feat: add options for sanitize outer links in css 
+https://jira.railsc.ru/browse/PC4-29908
 
 * 2023-06-15 [503fce2](../../commit/503fce2) - __(Andrew N. Shalaev)__ Release v1.0.0 
 * 2023-06-15 [8e9fa48](../../commit/8e9fa48) - __(Andrew N. Shalaev)__ fix: convert to_utf8 correctly, without hidding errors 
@@ -96,6 +117,21 @@ https://jira.railsc.ru/browse/PC4-16353
 # v3.0.1
 
 
+# v1.1.0
+
+* 2023-08-29 [bed389b](../../commit/bed389b) - __(Terentev Aleksey)__ feat: sanitize links in alt of img tag 
+https://jira.railsc.ru/browse/PC4-29908
+
+* 2023-08-11 [7848491](../../commit/7848491) - __(Terentev Aleksey)__ feat: add options for sanitize outer links in css 
+https://jira.railsc.ru/browse/PC4-29908
+
+# v1.0.0
+
+* 2023-06-15 [8e9fa48](../../commit/8e9fa48) - __(Andrew N. Shalaev)__ fix: convert to_utf8 correctly, without hidding errors 
+https://jira.railsc.ru/browse/BPC-22244
+
+* 2023-06-15 [9bc5cf5](../../commit/9bc5cf5) - __(Andrew N. Shalaev)__ fix: up test env 
+
 # v0.16.0
 
 * 2021-07-16 [5784a91](../../commit/5784a91) - __(Andrew N. Shalaev)__ feature: add support for ruby v2.4 

data/lib/string_tools/version.rb

@@ -1,4 +1,4 @@
 # frozen_string_literal: true
 module StringTools
-  VERSION = '1.0.0'
+  VERSION = '1.2.0'
 end

data/lib/string_tools.rb

@@ -155,6 +155,11 @@ module StringTools
 
       TAGS_WITHOUT_ATTRIBUTES = %w(b strong i em sup sub ul ol li blockquote br tr u caption thead s).freeze
 
+      # Public: Sanitize string
+      # str - String for sanitize
+      # attrs - Hash, custom attributes, defaults empty hash
+      #   remove_contents - Set of string, tags to be removed
+      #   protocols - Array of string, protocols using in css properties urls
       def sanitize(str, attrs = {})
         # для корректного обрезания utf строчек режем через mb_chars
         # для защиты от перегрузки парсера пропускаем максимум 1 мегабайт текста
@@ -162,6 +167,9 @@ module StringTools
         # длина по символам с перестраховкой, т.к. латинские символы(теги, например) занимают 1 байт
         str = str.mb_chars.slice(0..(2**19)).to_s
 
+        remove_contents = attrs.delete(:remove_contents)
+        protocols = attrs.delete(:protocols) || []
+
         # Мерджим добавочные теги и атрибуты
         attributes = TAGS_WITH_ATTRIBUTES.merge(attrs)
         elements = attributes.keys | TAGS_WITHOUT_ATTRIBUTES
@@ -173,8 +181,12 @@ module StringTools
           str,
           :attributes => attributes,
           :elements => elements,
-          :css => {:properties => Sanitize::Config::RELAXED[:css][:properties]},
-          :remove_contents => %w(style script),
+          :css => {
+            at_rules_with_styles: ['media'],
+            properties: Sanitize::Config::RELAXED[:css][:properties],
+            protocols: protocols,
+          },
+          :remove_contents => remove_contents || Set['style', 'script'],
           :allow_comments => false,
           :transformers => transformers
         )
@@ -191,6 +203,7 @@ module StringTools
           normalize_link node, 'href'
         when 'img'
           normalize_link node, 'src'
+          remove_links node, 'alt'
         end
       end
 
@@ -202,6 +215,14 @@ module StringTools
       rescue Addressable::URI::InvalidURIError
         node.swap node.children
       end
+
+      def remove_links(node, attr_name)
+        return unless node[attr_name]
+
+        node[attr_name] = node[attr_name].gsub(URI::DEFAULT_PARSER.make_regexp, '').squish
+
+        node.remove_attribute(attr_name) if node[attr_name].empty?
+      end
     end
 
     class IframeNormalizer

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: string_tools
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.2.0
 platform: ruby
 authors:
 - Sergey D.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-06-15 00:00:00.000000000 Z
+date: 2024-04-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: actionpack