unpoly-rails 2.7.2 → 2.7.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c2bb4db2064c35c212f0f4dfcf7837018236c8f095ff9107d34fefa012a2b708
-  data.tar.gz: afd8c55e4588f11f6c3a277d871ebbbbdc05b82721e712af8ed5921dfe13ce9e
+  metadata.gz: 17aae8ae028ba49402b7b5544ad8498af55fae1c17d606883f522e14d84d7727
+  data.tar.gz: 6f819af3aa0339f9c3a3c63836a6dfde27d019d51a795dc8aa16800560e7082a
 SHA512:
-  metadata.gz: b77c3d3c2f1b2bcff0d55fea06f63ae969048630c32e10a5d6ed3fb4aa71431daf19599f09afa57e762725a390c6514be674f6353a44e134eed864fadb3cdc44
-  data.tar.gz: c636750c645aac97e456c0316fd62469043ffa0153c5e5b4b5c42a465623ef140c6a416523a00befe0da5e30d76416d479b404d59e632e017e8ab8ac63d7fb0b
+  metadata.gz: af953dbde16013e047641a4801398595b6e9c6c1d5394ff614083bac5aa3289f70ebbf810a58f031545092672f57129736007a6aaef238d38d11f9b0c73edd8d
+  data.tar.gz: 44694a2cf5d4d5c5510f136be407d79601093d2a5dbef375b4f8500c72099c178931c5d6f33d1da86c1e5dbd648be71a0809c1b870b1b6ff49c90d63465e8840

data/lib/unpoly/rails/change/field.rb

@@ -50,7 +50,7 @@ module Unpoly
           end
 
           def stringify(value)
-            value.to_json
+            Util.safe_json_encode(value)
           end
 
         end
@@ -75,7 +75,7 @@ module Unpoly
 
           def parse(raw)
             if raw.present?
-              result = ActiveSupport::JSON.decode(raw)
+              result = Util.json_decode(raw)
             else
               result = {}
             end
@@ -88,7 +88,7 @@ module Unpoly
           end
 
           def stringify(value)
-            ActiveSupport::JSON.encode(value)
+            Util.safe_json_encode(value)
           end
 
         end
@@ -97,7 +97,7 @@ module Unpoly
 
           def parse(raw)
             if raw.present?
-              result = ActiveSupport::JSON.decode(raw)
+              result = Util.json_decode(raw)
             else
               result = []
             end
@@ -106,7 +106,7 @@ module Unpoly
           end
 
           def stringify(value)
-            ActiveSupport::JSON.encode(value)
+            Util.safe_json_encode(value)
           end
 
         end

data/lib/unpoly/rails/change/layer.rb

@@ -40,14 +40,14 @@ module Unpoly
         # TODO: Docs
         def accept(value = nil)
           overlay? or raise CannotClose, 'Cannot accept the root layer'
-          change.response.headers['X-Up-Accept-Layer'] = value.to_json
+          change.response.headers['X-Up-Accept-Layer'] = Util.safe_json_encode(value)
         end
 
         ##
         # TODO: Docs
         def dismiss(value = nil)
           overlay? or raise CannotClose, 'Cannot dismiss the root layer'
-          change.response.headers['X-Up-Dismiss-Layer'] = value.to_json
+          change.response.headers['X-Up-Dismiss-Layer'] = Util.safe_json_encode(value)
         end
 
         private
@@ -57,4 +57,4 @@ module Unpoly
       end
     end
   end
-end
+end

data/lib/unpoly/rails/util.rb

@@ -0,0 +1,25 @@
+module Unpoly
+  module Rails
+    class Util
+      class << self
+
+        def json_decode(string)
+          ActiveSupport::JSON.decode(string)
+        end
+
+        # We build a lot of JSON that goes into HTTP header.
+        # High-ascii characters are not safe to transport over HTTP, but we
+        # can use JSON escape sequences (\u0012) to make them low-ascii.
+        def safe_json_encode(value)
+          json = ActiveSupport::JSON.encode(value)
+          escape_non_ascii(json)
+        end
+
+        def escape_non_ascii(unicode_string)
+          unicode_string.gsub(/[[:^ascii:]]/) { |char| "\\u" + char.ord.to_s(16).rjust(4, "0") }
+        end
+
+      end
+    end
+  end
+end

data/lib/unpoly/rails/version.rb

@@ -4,6 +4,6 @@ module Unpoly
     # The current version of the unpoly-rails gem.
     # This version number is also used for releases of the Unpoly
     # frontend code.
-    VERSION = '2.7.2'
+    VERSION = '2.7.2.1'
   end
 end

data/lib/unpoly-rails.rb

@@ -1,6 +1,7 @@
 require 'memoized'
 require_relative 'unpoly/rails/version'
 require_relative 'unpoly/rails/error'
+require_relative 'unpoly/rails/util'
 require_relative 'unpoly/rails/engine'
 require_relative 'unpoly/rails/request_echo_headers'
 require_relative 'unpoly/rails/request_method_cookie'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: unpoly-rails
 version: !ruby/object:Gem::Version
-  version: 2.7.2
+  version: 2.7.2.1
 platform: ruby
 authors:
 - Henning Koch
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-03-02 00:00:00.000000000 Z
+date: 2023-03-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -138,6 +138,7 @@ files:
 - lib/unpoly/rails/error.rb
 - lib/unpoly/rails/request_echo_headers.rb
 - lib/unpoly/rails/request_method_cookie.rb
+- lib/unpoly/rails/util.rb
 - lib/unpoly/rails/version.rb
 homepage: https://github.com/unpoly/unpoly-rails
 licenses: