unpoly-rails 2.7.1.1 → 2.7.2.1

data/lib/unpoly/rails/change/field.rb

@@ -50,7 +50,7 @@ module Unpoly
           end
 
           def stringify(value)
-            value.to_json
+            Util.safe_json_encode(value)
           end
 
         end
@@ -75,7 +75,7 @@ module Unpoly
 
           def parse(raw)
             if raw.present?
-              result = ActiveSupport::JSON.decode(raw)
+              result = Util.json_decode(raw)
             else
               result = {}
             end
@@ -88,7 +88,7 @@ module Unpoly
           end
 
           def stringify(value)
-            ActiveSupport::JSON.encode(value)
+            Util.safe_json_encode(value)
           end
 
         end
@@ -97,7 +97,7 @@ module Unpoly
 
           def parse(raw)
             if raw.present?
-              result = ActiveSupport::JSON.decode(raw)
+              result = Util.json_decode(raw)
             else
               result = []
             end
@@ -106,7 +106,7 @@ module Unpoly
           end
 
           def stringify(value)
-            ActiveSupport::JSON.encode(value)
+            Util.safe_json_encode(value)
           end
 
         end

data/lib/unpoly/rails/change/layer.rb

@@ -40,14 +40,14 @@ module Unpoly
         # TODO: Docs
         def accept(value = nil)
           overlay? or raise CannotClose, 'Cannot accept the root layer'
-          change.response.headers['X-Up-Accept-Layer'] = value.to_json
+          change.response.headers['X-Up-Accept-Layer'] = Util.safe_json_encode(value)
         end
 
         ##
         # TODO: Docs
         def dismiss(value = nil)
           overlay? or raise CannotClose, 'Cannot dismiss the root layer'
-          change.response.headers['X-Up-Dismiss-Layer'] = value.to_json
+          change.response.headers['X-Up-Dismiss-Layer'] = Util.safe_json_encode(value)
         end
 
         private
@@ -57,4 +57,4 @@ module Unpoly
       end
     end
   end
-end
+end

data/lib/unpoly/rails/util.rb

@@ -0,0 +1,25 @@
+module Unpoly
+  module Rails
+    class Util
+      class << self
+
+        def json_decode(string)
+          ActiveSupport::JSON.decode(string)
+        end
+
+        # We build a lot of JSON that goes into HTTP header.
+        # High-ascii characters are not safe to transport over HTTP, but we
+        # can use JSON escape sequences (\u0012) to make them low-ascii.
+        def safe_json_encode(value)
+          json = ActiveSupport::JSON.encode(value)
+          escape_non_ascii(json)
+        end
+
+        def escape_non_ascii(unicode_string)
+          unicode_string.gsub(/[[:^ascii:]]/) { |char| "\\u" + char.ord.to_s(16).rjust(4, "0") }
+        end
+
+      end
+    end
+  end
+end

data/lib/unpoly/rails/version.rb

@@ -4,6 +4,6 @@ module Unpoly
     # The current version of the unpoly-rails gem.
     # This version number is also used for releases of the Unpoly
     # frontend code.
-    VERSION = '2.7.1.1'
+    VERSION = '2.7.2.1'
   end
 end

data/lib/unpoly-rails.rb

@@ -1,6 +1,7 @@
 require 'memoized'
 require_relative 'unpoly/rails/version'
 require_relative 'unpoly/rails/error'
+require_relative 'unpoly/rails/util'
 require_relative 'unpoly/rails/engine'
 require_relative 'unpoly/rails/request_echo_headers'
 require_relative 'unpoly/rails/request_method_cookie'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: unpoly-rails
 version: !ruby/object:Gem::Version
-  version: 2.7.1.1
+  version: 2.7.2.1
 platform: ruby
 authors:
 - Henning Koch
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-11-21 00:00:00.000000000 Z
+date: 2023-03-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -122,6 +122,7 @@ files:
 - assets/unpoly/unpoly.es5.js
 - assets/unpoly/unpoly.es5.min.js
 - assets/unpoly/unpoly.es6.js
+- assets/unpoly/unpoly.es6.min.js
 - assets/unpoly/unpoly.js
 - assets/unpoly/unpoly.min.css
 - assets/unpoly/unpoly.min.js
@@ -137,6 +138,7 @@ files:
 - lib/unpoly/rails/error.rb
 - lib/unpoly/rails/request_echo_headers.rb
 - lib/unpoly/rails/request_method_cookie.rb
+- lib/unpoly/rails/util.rb
 - lib/unpoly/rails/version.rb
 homepage: https://github.com/unpoly/unpoly-rails
 licenses: