tag_helper 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 06dc8efa3ade2413595a185e35a07094c1679e3f
-  data.tar.gz: 890a0fa82bd291243f759816fa1ed2e254a963e8
+  metadata.gz: 2eabb8b249d6c44b44f92b70f466833eeb165565
+  data.tar.gz: a1bbaa8fbbc8e7c074c9cbc9c665f34a642a8f63
 SHA512:
-  metadata.gz: 0d5e08a8fff8746842eb8a57df70145b18a5cca63ec062e877e3a29fb58cd165ef825df5470542d44d08b883be8400834261182720906a7e2cd87821ccc1f2cb
-  data.tar.gz: 63cb587c2b66b13b003ebda95459216763c36c65f76166a32113629855c4bf5fbff35486112508992a6d91ba1c17e63fd7ba6478e2d8634e4cf791d9f65d703e
+  metadata.gz: 48c4004d2647dde1d73a0d67b18c7ae8daef6d000783a3dfd49f32aefc72691a4eb556e3a890cc6afbf99acc2cc62313412b160b18ed9f906bb5518e405e92b1
+  data.tar.gz: 70c3db7ce70aa6cc34775eb823e429f930d166c31319e86ac149c4ff7df529b52d2f4c9c5398791d366b677b47a656a9c8828450e3ea7ad9d961281e5d1ab07c

data/README.md

@@ -28,8 +28,17 @@ $ gem install tag_helper
 ```ruby
 require 'tag_helper'
 
-TagHelper.image_tag('1.png', :alt => 'number one!')
-# => "<img alt="number one!" src="1.png" />"
+TagHelper.unary(:img, src: '1.png', alt: 'number one!'))
+# => '<img src="1.png" alt="number one!" />'
+
+TagHelper.unary(:br)
+# => '<br />'
+
+TagHelper.content(:label, 'Name', for: 'name'))
+# => '<label for="name">Name</label>'
+
+TagHelper.content(:p, '<script>alert(0)</script>')
+# => '<p>&lt;script&gt;alert(0)&lt;/script&gt;</p>'
 ```
 
 ## LICENSE

data/lib/tag_helper.rb

@@ -1,44 +1,9 @@
+require 'cgi'
+
 # XHTML tags builder
 module TagHelper
   module_function
 
-  def image(src, html_options = {})
-    unary(
-      :img,
-      html_options.merge(src: src))
-  end
-
-  def label(label_for, label = nil, html_options = {})
-    content(
-      :label,
-      label || label_for,
-      html_options.merge(for: label_for))
-  end
-
-  def text_field(name, value, html_options = {})
-    unary(
-      :input,
-      html_options.merge(
-        id: name,
-        value: value,
-        type: 'text',
-        name: name))
-  end
-
-  def hidden_field(name, value, html_options = {})
-    unary(
-      :input,
-      html_options.merge(
-        id: name,
-        value: value,
-        type: 'hidden',
-        name: name))
-  end
-
-  def iframe(html_options = {})
-    unary(:iframe, html_options)
-  end
-
   def unary(tag, attrs = {})
     "<#{tag_and_attributes(tag, attributes(attrs))} />"
   end
@@ -46,7 +11,7 @@ module TagHelper
   def content(tag, value, attrs = {})
     start_tag = "<#{tag_and_attributes(tag, attributes(attrs))}>"
     end_tag   = "</#{tag}>"
-    [start_tag, value, end_tag].join
+    [start_tag, escape_html(value), end_tag].join
   end
 
   def tag_and_attributes(tag, attributes)
@@ -56,6 +21,10 @@ module TagHelper
   def attributes(hash)
     hash.to_a
       .reject { |_k, v| v.nil? }
-      .map { |k, v| %(#{k}="#{v}") }.join(' ')
+      .map { |k, v| %(#{escape_html(k)}="#{escape_html(v)}") }.join(' ')
+  end
+
+  def escape_html(str)
+    CGI.escapeHTML(str.to_s)
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: tag_helper
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Dejan Simic
@@ -15,6 +15,9 @@ dependencies:
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.4'
+    - - ">="
       - !ruby/object:Gem::Version
         version: 10.4.2
   type: :development
@@ -22,6 +25,9 @@ dependencies:
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.4'
+    - - ">="
       - !ruby/object:Gem::Version
         version: 10.4.2
 - !ruby/object:Gem::Dependency
@@ -29,6 +35,9 @@ dependencies:
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.1.5
   type: :development
@@ -36,6 +45,9 @@ dependencies:
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+    - - ">="
       - !ruby/object:Gem::Version
         version: 3.1.5
 - !ruby/object:Gem::Dependency
@@ -83,6 +95,6 @@ rubyforge_project:
 rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
-summary: Lightweight Ruby lib for building XHTML tags
+summary: Build XHTML tags with minimal API
 test_files: []
 has_rdoc: