whereable 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e05606c44046b2bbc2afb63ad64dc40dfbd950c7e2417f8303ac9d504033fcf9
-  data.tar.gz: e279cfd12a42d0dcc22bd33c2a934875d8c6bf16432c3fd62f53cb3d51bcdb5b
+  metadata.gz: ea1b122fb55b9fca4d22efd7d32057bbc198ef97f4090bdf8bdaa42da6b15a7f
+  data.tar.gz: 8a0d13ea659a80ca2f34df1e7e970ee6716bed272a36e288472a1827c6b61855
 SHA512:
-  metadata.gz: 888cd81cd96258b790b2f789e001572155628837d10bc8e813219618c879540530916b62652249d3334a861ba9e091a2599dfe45acef67e388ad013d79e784f2
-  data.tar.gz: 17764113a90b3dc10742ce4f566029c2a7bb0e9ad7249a701cd598c4666f483e3a4e9dec92a974046f11cb7b65b408cc06f3623f039ebcf3fa2339f730116af0
+  metadata.gz: 1e66e7d892444322c226af98aedd2639b31d3ebb1444bd6337582c6e40248dd2276b183ad70e6794430f0ed0cfa6618fccc37a9308ddf2a50c53453db74e05ac
+  data.tar.gz: 2552253cb5f31f90d5830a95db7f0f328b05f477e8f31709cb76234ebcfb3782709e322e1fa8c45b48b8645e413ac5d40f0f81045b7521979875d7432fece3bd

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 Release History
 ===============
+# 0.1.2
+* Appears to work with Ruby 2.3.0 and ActiveRecord 4.1.0 or newer.
+  However, there's a version conflict surrounding Treetop in Rails < 4.1.6.
+
 # 0.1.1
 * Make operators case-insensitive
 

data/README.md

@@ -1,3 +1,5 @@
+[![Gem Version](https://badge.fury.io/rb/whereable.svg)](https://badge.fury.io/rb/whereable)
+
 # Whereable
 
 Translates where-like filter syntax into an Arel-based ActiveRecord scope, so you can safely use SQL syntax in Rails controller parameters.
@@ -47,11 +49,15 @@ User.standard.where("born_on < '1970-11-11'")
 ```
 returns Neo as expected, so we're all good.
 
-*Meanwhile&hellip;* Your black hat API consumer passes in `filter=true) or (1=1`, and &hellip;
+*Meanwhile&hellip;* Your black hat API consumer passes in `filter=true) or (true`, and &hellip;
 ``` ruby
-User.standard.where("true) or (1=1")
+User.standard.where("true) or (true")
+```
+returns **EVERYONE**, because the database query is &hellip;
+``` SQL
+SELECT "users".* FROM "users" WHERE "users"."role" = 0 AND (true) or (true)
 ```
-returns **EVERYONE!!!** *This is how the Matrix gets hacked.*
+*This is how the Matrix gets hacked.*
 
 Instead add `include Whereable` to your model, and change your controller to:
 ``` ruby
@@ -63,11 +69,11 @@ User.standard.whereable("born_on < '1970-11-11'")
 ```
 returns Neo as before, but &hellip;
 ``` ruby
-User.standard.whereable("true) or (1=1")
+User.standard.whereable("true) or (true")
 ```
 raises exception &hellip;
 ``` ruby
-Whereable::FilterInvalid ('Invalid filter at ) or (1=1')
+Whereable::FilterInvalid ('Invalid filter at ) or (true')
 ```
 
 ### Syntax

data/lib/whereable.rb

@@ -4,7 +4,6 @@
 
 require 'whereable/version'
 require 'active_record'
-require 'active_support'
 require 'treetop'
 require 'whereable.treetop'
 
@@ -106,7 +105,7 @@ module Whereable
     )
   end
 
-  class_methods do
+  module ClassMethods
     # Parse filter to hash tree using Treetop PEG
     def whereable_hash_tree(filter)
       parser = WhereableParser.new

data/lib/whereable/version.rb

@@ -3,6 +3,6 @@
 # Copyright 2020 Mack Earnhardt
 
 module Whereable
-  VERSION = '0.1.1'
+  VERSION = '0.1.2'
   public_constant :VERSION
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: whereable
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Mack Earnhardt
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 4.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 4.1.0
 - !ruby/object:Gem::Dependency
   name: treetop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.5.1
 description: |
   Translates where-like filter syntax into an Arel-based ActiveRecord scope,
   so you can safely use SQL syntax in Rails controller parameters.
@@ -69,7 +69,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.4.0
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="