upfluence-utils 0.9.2 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 35be0f17a3c73784afa8e178a740bed54d6491d182d592177904bbfbf31e0b83
-  data.tar.gz: 9d7bebee3fbdead4d8b32e3314adbfba61e282811249b023fc2d0488dfb0a538
+  metadata.gz: c8c88069b0d18a4f8f01315a252a691a7410d3dfcfdf268f3c99508b8a31e504
+  data.tar.gz: 536742411a6e92e68787c5fdb64f5542f9fcdb6f0e138d9bfa6e3d3d5857e697
 SHA512:
-  metadata.gz: 423c2ef58a5363705bb5f90ec629648000a2d25c14c2536da02afb1def3f14c946db657ca244887ec3cc5400d2b78feaf6be5c92103b8853a0af420cdf6bbffc
-  data.tar.gz: e559829e31729eaa0ed30bde6d3d4fcda417d7833324a93c1ac923e4bf9e8ff3fcbf0abd0b4f0357f4c967e2d9a9b165d1c33c2fe542a4bb9f36ac5212ac836c
+  metadata.gz: d3defd0c55f04af0751f337e50ed62a32915b83d2f9b90ac9aed21513ca38ae37b89d8db49d3614f634596fdad2876316643967c21d5d54bcaf3e543a3068b09
+  data.tar.gz: b5ca86d6ca49687d46f5ea3b4b1e2de8b5907f4928335f10212d74ac6772b28d5a16f3891f7f7365828f6c5a49cdc8b72e7260d828e893284cb6641e81c25377

data/lib/upfluence/http/endpoint/api_endpoint.rb

@@ -2,6 +2,7 @@ require 'sinatra'
 require 'active_record'
 require 'active_support/hash_with_indifferent_access'
 require 'upfluence/http/endpoint/validation_error'
+require 'upfluence/mixin/strong_parameters'
 
 module Upfluence
   module HTTP
@@ -99,6 +100,16 @@ module Upfluence
       Sinatra::Base.error ActiveRecord::RecordInvalid do |e|
         [422, Base::Exceptions::ValidationError.from_model(e.record).to_json]
       end
+
+      Sinatra::Base.error Upfluence::Mixin::StrongParameters::ParameterMissing do |e|
+        [
+          400,
+          {
+            error: 'missing_parameter',
+            param: e.param
+          }.to_json
+        ]
+      end
     end
   end
 end

data/lib/upfluence/mixin/html_scrubbing.rb

@@ -0,0 +1,25 @@
+require 'loofah'
+
+module Upfluence
+  module Mixin
+    module HTMLScrubbing
+      def scrub_params(params, *keys)
+        keys.reduce(params) do |vs, key|
+          if vs.key? key
+            vs.merge(key => scrub_value(vs[key]))
+          else
+            vs
+          end
+        end
+      end
+
+      private
+
+      def scrub_value(value)
+        return nil unless value.is_a? String
+
+        Loofah.fragment(value).scrub!(:prune).to_s
+      end
+    end
+  end
+end

data/lib/upfluence/resources/countries.rb

@@ -1,23 +1,15 @@
 module Upfluence
   module Resources
     COUNTRIES = %w[
-      US FR GB DE CH AF AL DZ AS AD AO AI
-      AG AR AM AW AU AT AZ BS BH BD BB BY
-      BE BZ BJ BM BT BO BA BW BR BN BG BF
-      BI CV KH CM CA KY CF TD CL CN CO KM
-      CG CD CK CI HR CU CY CZ DK DJ DM DO
-      GW GY HT VA HN HK HU IS IN ID IR IQ
-      IE IM IL IT JM JP JE JO KZ KE KI KP
-      KR KW KG LA LV LB LI LS LR LY LT LU
-      MO MK MG MW MY MV ML MT MH MQ MR MU
-      MX FM MD MC MN ME MS MA MZ MM NA NR
-      NP NL NC NZ NI NE NG NO OM PK PW PS
-      PA PG PY PE PH PL PT PR QA RE RO RU
-      RW KN LC VC WS SM ST SA SN RS SC SL
-      SG SK SI SB SO ZA ES LK SD SR SZ SE
-      SY TW TJ TZ TH TL TG TO TT TN TR TM
-      TC TV UG UA AE GB UY UZ VU VE VN VG
-      VI EH YE ZM ZW CR
+      US FR GB DE CH AF AL DZ AS AD AO AI AG AR AM AW AU AT AZ BS BH BD BB BY BE
+      BZ BJ BM BT BO BA BW BR BN BG BF BI CV KH CM CA KY CF TD CL CN CO KM CG CD
+      CK CI HR CU CY CZ DK DJ DM DO EC EG SV GQ ER EE ET FO FJ FI PF GA GM GE GH
+      GI GR GL GD GP GU GT GG GN GW GY HT VA HN HK HU IS IN ID IR IQ IE IM IL IT
+      JM JP JE JO KZ KE KI KP KR KW KG LA LV LB LI LS LR LY LT LU MO MK MG MW MY
+      MV ML MT MH MQ MR MU MX FM MD MC MN ME MS MA MZ MM NA NR NP NL NC NZ NI NE
+      NG NO OM PK PW PS PA PG PY PE PH PL PT PR QA RE RO RU RW KN LC VC WS SM ST
+      SA SN RS SC SL SG SK SI SB SO ZA ES LK SD SR SZ SE SY TW TJ TZ TH TL TG TO
+      TT TN TR TM TC TV UG UA AE GB UY UZ VU VE VN VG VI EH YE ZM ZW CR
     ].freeze
   end
 end

data/lib/upfluence/utils/version.rb

@@ -1,5 +1,5 @@
 module Upfluence
   module Utils
-    VERSION = '0.9.2'.freeze
+    VERSION = '0.10.0'.freeze
   end
 end

data/rbutils.gemspec

@@ -31,4 +31,5 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'prometheus-client', '~> 2.1'
   spec.add_runtime_dependency 'userializer'
   spec.add_runtime_dependency 'activerecord'
+  spec.add_runtime_dependency 'loofah'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: upfluence-utils
 version: !ruby/object:Gem::Version
-  version: 0.9.2
+  version: 0.10.0
 platform: ruby
 authors:
 - Upfluence
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-01-29 00:00:00.000000000 Z
+date: 2021-09-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -220,6 +220,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: loofah
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description:
 email:
 - dev@upfluence.com
@@ -255,6 +269,7 @@ files:
 - lib/upfluence/http/middleware/prometheus.rb
 - lib/upfluence/http/server.rb
 - lib/upfluence/logger.rb
+- lib/upfluence/mixin/html_scrubbing.rb
 - lib/upfluence/mixin/pagination.rb
 - lib/upfluence/mixin/strong_parameters.rb
 - lib/upfluence/peer.rb