trust_html 0.1.1 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. data/VERSION +1 -1
  2. data/lib/trust_html/sanitizer.rb +2 -1
  3. data/trust_html.gemspec +1 -1
  4. metadata +14 -14
data/VERSION CHANGED
@@ -1 +1 @@
1
- 0.1.1
1
+ 0.1.2
data/lib/trust_html/sanitizer.rb CHANGED
@@ -10,7 +10,8 @@ module TrustHtml
10
10
  # Example of forcing HTTPS
11
11
  # "if((new RegExp(\"^(https)?:\/\/\", \"ig\")).test(url)) { return url; }" +
12
12
  # 'url' is local to the method
13
- URL_SANITIZER_METHOD_BODY = "return url;"
13
+ # Make sure the URL is at minimum a URL (and not JS)...
14
+ URL_SANITIZER_METHOD_BODY = "if((new RegExp(\"^(https|http)?:\/\/\", \"ig\")).test(url)) { return url; }"
14
15
 
15
16
  # Test every ID to make sure it does not conflict (or just remove them all) etc.
16
17
  # 'id' is local to the method
data/trust_html.gemspec CHANGED
@@ -5,7 +5,7 @@
5
5
 
6
6
  Gem::Specification.new do |s|
7
7
  s.name = %q{trust_html}
8
- s.version = "0.1.1"
8
+ s.version = "0.1.2"
9
9
 
10
10
  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
11
11
  s.authors = [%q{Cary Dunn}]
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: trust_html
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.1
4
+ version: 0.1.2
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -13,7 +13,7 @@ date: 2011-07-15 00:00:00.000000000Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: better
16
- requirement: &2152272220 !ruby/object:Gem::Requirement
16
+ requirement: &2152326840 !ruby/object:Gem::Requirement
17
17
  none: false
18
18
  requirements:
19
19
  - - ! '>='
@@ -21,10 +21,10 @@ dependencies:
21
21
  version: '0'
22
22
  type: :runtime
23
23
  prerelease: false
24
- version_requirements: *2152272220
24
+ version_requirements: *2152326840
25
25
  - !ruby/object:Gem::Dependency
26
26
  name: therubyracer
27
- requirement: &2152257680 !ruby/object:Gem::Requirement
27
+ requirement: &2152312240 !ruby/object:Gem::Requirement
28
28
  none: false
29
29
  requirements:
30
30
  - - ! '>='
@@ -32,10 +32,10 @@ dependencies:
32
32
  version: '0'
33
33
  type: :runtime
34
34
  prerelease: false
35
- version_requirements: *2152257680
35
+ version_requirements: *2152312240
36
36
  - !ruby/object:Gem::Dependency
37
37
  name: shoulda
38
- requirement: &2152249880 !ruby/object:Gem::Requirement
38
+ requirement: &2152310460 !ruby/object:Gem::Requirement
39
39
  none: false
40
40
  requirements:
41
41
  - - ! '>='
@@ -43,10 +43,10 @@ dependencies:
43
43
  version: '0'
44
44
  type: :development
45
45
  prerelease: false
46
- version_requirements: *2152249880
46
+ version_requirements: *2152310460
47
47
  - !ruby/object:Gem::Dependency
48
48
  name: bundler
49
- requirement: &2152247140 !ruby/object:Gem::Requirement
49
+ requirement: &2152309720 !ruby/object:Gem::Requirement
50
50
  none: false
51
51
  requirements:
52
52
  - - ~>
@@ -54,10 +54,10 @@ dependencies:
54
54
  version: 1.0.0
55
55
  type: :development
56
56
  prerelease: false
57
- version_requirements: *2152247140
57
+ version_requirements: *2152309720
58
58
  - !ruby/object:Gem::Dependency
59
59
  name: jeweler
60
- requirement: &2152244460 !ruby/object:Gem::Requirement
60
+ requirement: &2152308100 !ruby/object:Gem::Requirement
61
61
  none: false
62
62
  requirements:
63
63
  - - ~>
@@ -65,10 +65,10 @@ dependencies:
65
65
  version: 1.6.4
66
66
  type: :development
67
67
  prerelease: false
68
- version_requirements: *2152244460
68
+ version_requirements: *2152308100
69
69
  - !ruby/object:Gem::Dependency
70
70
  name: rcov
71
- requirement: &2152218160 !ruby/object:Gem::Requirement
71
+ requirement: &2152306820 !ruby/object:Gem::Requirement
72
72
  none: false
73
73
  requirements:
74
74
  - - ! '>='
@@ -76,7 +76,7 @@ dependencies:
76
76
  version: '0'
77
77
  type: :development
78
78
  prerelease: false
79
- version_requirements: *2152218160
79
+ version_requirements: *2152306820
80
80
  description: Make HTML trustworthy for rendering within your web app via Google HTML
81
81
  sanitizers. This is _not_ about stripping HTML but rather about cleaning it of javascript
82
82
  (onclicks, etc.) as well as CSS.
@@ -117,7 +117,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
117
117
  version: '0'
118
118
  segments:
119
119
  - 0
120
- hash: -3766334305255440814
120
+ hash: -3197474995446490302
121
121
  required_rubygems_version: !ruby/object:Gem::Requirement
122
122
  none: false
123
123
  requirements: