twitter_cldr 6.10.0 → 6.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce23d1d3e7d5428401b92b60c2570f8a2370e41beb32068fc0df7a6ce4959126
-  data.tar.gz: 595d913024e24dd3fd86426f12288c7040904f446291145e5ba92c0945a33d12
+  metadata.gz: d2208001cc0fddbd8fbf3d87a557fe1c124439b8dd1abd14b5515a915cefe288
+  data.tar.gz: 564cdeb9423b2b055953ca9c755f93518e38d83d3895db6140593807c1e3aa05
 SHA512:
-  metadata.gz: 402c8198faf70a1f72631e202278e2bf464a67c81d42dec357f0c474d078085054651b2bd166e1de6c1d078c83ddfbcc757de638affb3415e597d6283033465e
-  data.tar.gz: d06ad1e4fc3aac7d069d606b75c1bcde9261f53805d9441914a042a641ed83cd0e06caa8039e7f44308726f686cc02ebeb0aeda52a693d5dbbbd9da3c0b46694
+  metadata.gz: 3db038bb6ec7c6d12181f5d7c087df93e18fbf7bda31642028e1f35b404072cf4cbabd7b1a993c7c6de24db9767193e80d2e5a6d77509d23ed9f6c19d4bfe31d
+  data.tar.gz: 6e93f77989434c7e7b97cd8c2081dacf9de00803781737df787dac93b19b8f0460cfc326f9baaea2da2b2f9503b11ab131816569f22a826bc8f87acf5abb06d2

data/lib/twitter_cldr/resources/loader.rb

@@ -10,7 +10,18 @@ module TwitterCldr
 
     class Loader
 
+      class << self
+        def load_yaml(yaml, permitted_classes: [])
+          if RUBY_VERSION >= '2.6.0'
+            YAML.safe_load(yaml, permitted_classes: permitted_classes)
+          else
+            YAML.safe_load(yaml, permitted_classes)
+          end
+        end
+      end
+
       VALID_EXTS = %w(.yml .dump).freeze
+      PERMITTED_YAML_CLASSES = [Range, Regexp, Symbol, Time].freeze
 
       def get_resource(*path)
         resources_cache[resource_file_path(path)]
@@ -105,7 +116,7 @@ module TwitterCldr
       end
 
       def load_yaml_resource(path, merge_custom = true)
-        base = YAML.load(read_resource_file(path))
+        base = load_yaml(read_resource_file(path), permitted_classes: PERMITTED_YAML_CLASSES)
         custom_path = File.join("custom", path)
 
         if merge_custom && custom_resource_exists?(custom_path) && !TwitterCldr.disable_custom_locale_resources
@@ -115,6 +126,10 @@ module TwitterCldr
         base
       end
 
+      def load_yaml(yaml, permitted_classes: [])
+        self.class.load_yaml(yaml, permitted_classes: permitted_classes)
+      end
+
       def load_marshalled_resource(path, _merge_custom = :unused)
         Marshal.load(read_resource_file(path))
       end

data/lib/twitter_cldr/version.rb

@@ -4,5 +4,5 @@
 # http://www.apache.org/licenses/LICENSE-2.0
 
 module TwitterCldr
-  VERSION = '6.10.0'
+  VERSION = '6.11.0'
 end

data/spec/localized/localized_array_spec.rb

@@ -69,7 +69,9 @@ describe TwitterCldr::Localized::LocalizedArray do
   describe "#to_yaml" do
     it "should be able to successfully roundtrip the array" do
       arr = [:foo, "bar", Object.new]
-      result = YAML.load(arr.localize.to_yaml)
+      result = TwitterCldr::Resources::Loader.load_yaml(
+        arr.localize.to_yaml, permitted_classes: [Object, Symbol]
+      )
 
       expect(result[0]).to eq(:foo)
       expect(result[1]).to eq("bar")

data/spec/localized/localized_hash_spec.rb

@@ -9,7 +9,7 @@ describe TwitterCldr::Localized::LocalizedHash do
   describe "#to_yaml" do
     it "should be able to successfully roundtrip the hash" do
       hash = { foo: "bar", "string_key" => Object.new }
-      result = YAML.load(hash.localize.to_yaml)
+      result = TwitterCldr::Resources::Loader.load_yaml(hash.localize.to_yaml, permitted_classes: [Object, Symbol])
 
       expect(result).to include(:foo)
       expect(result).to include("string_key")

data/spec/utils/yaml/yaml_spec.rb

@@ -345,7 +345,6 @@ describe TwitterCldr::Utils do
         :foo,
         1..10,
         /abc\nxyz/i,
-        @struct,
         @klass,
       ]
       s.force_encoding("BINARY") if s.respond_to? :force_encoding
@@ -373,7 +372,7 @@ describe TwitterCldr::Utils do
             obj
         end
         y = TwitterCldr::Utils::YAML.dump(src, syck_compatible: true)
-        r = YAML.load(y)
+        r = TwitterCldr::Resources::Loader.load_yaml(y, permitted_classes: [Date, Moo, Range, Regexp, Symbol, Time])
         expect(src).to eq(r)
       end
     end
@@ -402,7 +401,7 @@ describe TwitterCldr::Utils do
         {1=>-2, -1=>@gif, '_foo'=>'bar', 'ぬお-ぬお'=>321},
       ].each do |src|
         y = TwitterCldr::Utils::YAML.dump(src, syck_compatible: true)
-        r = YAML.load(y)
+        r = TwitterCldr::Resources::Loader.load_yaml(y, permitted_classes: [Date, Range, Symbol, Time])
         expect(src).to eq(r)
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: twitter_cldr
 version: !ruby/object:Gem::Version
-  version: 6.10.0
+  version: 6.11.0
 platform: ruby
 authors:
 - Cameron Dutro
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-12-18 00:00:00.000000000 Z
+date: 2021-12-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: camertron-eprun
@@ -3987,7 +3987,7 @@ homepage: https://twitter.com
 licenses:
 - Apache-2.0
 metadata: {}
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -4002,8 +4002,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.22
-signing_key:
+rubyforge_project: 
+rubygems_version: 2.7.6.3
+signing_key: 
 specification_version: 4
 summary: Ruby implementation of the ICU (International Components for Unicode) that
   uses the Common Locale Data Repository to format dates, plurals, and more.