whiny-mass-assignment 0.1.5 → 0.1.6

data/Manifest

@@ -7,6 +7,7 @@ Rakefile
 lib/whiny-mass-assignment.rb
 lib/whiny-mass-assignment/color_escapes.rb
 lib/whiny-mass-assignment/configuration.rb
+lib/whiny-mass-assignment/mass_assignment_security_overrides.rb
 lib/whiny-mass-assignment/sanitizer.rb
 lib/whiny_mass_assignment.rb
 rails/init.rb
@@ -14,3 +15,4 @@ spec/config_spec.rb
 spec/sanitizer_spec.rb
 spec/spec_helper.rb
 tasks/spec.rake
+whiny-mass-assignment.gemspec

data/Rakefile

@@ -2,7 +2,7 @@ require 'rubygems'
 require 'rake'
 require 'echoe'
 
-Echoe.new( 'whiny-mass-assignment', '0.1.5', ) do |p|
+Echoe.new( 'whiny-mass-assignment', '0.1.6', ) do |p|
   p.description             = "Complain loudly when protected attributes are set through mass assignment."
   p.url                     = "https://github.com/appsinyourpants/whiny-mass-assignment"
   p.author                  = "Paul Alexander"

data/lib/whiny-mass-assignment.rb

@@ -15,11 +15,20 @@ module WhinyMassAssignment
       @mode = value
     end
     
+    def whitelist
+      @whitelist ||= { :mode => :raise, :except => [] }
+    end
+    
+    def whitelist=( options = {} )
+      options[:mode] ||= :raise
+      @whitelist = options
+    end
+    
   end
 end
 
-
 require 'whiny-mass-assignment/sanitizer'
+require 'whiny-mass-assignment/mass_assignment_security_overrides'
 if defined? Rails
   require 'whiny-mass-assignment/configuration'
 end

data/lib/whiny-mass-assignment/configuration.rb

@@ -9,6 +9,13 @@ module WhinyMassAssignment
       Config.mode = value
     end
     
+    def whiny_mass_assignment_whitelist
+      Config.whitelist
+    end
+    def whiny_mass_assignment_whitelist=( options )
+      Config.whitelist = options
+    end
+    
   end
 end
 

data/lib/whiny-mass-assignment/mass_assignment_security_overrides.rb

@@ -0,0 +1,31 @@
+require 'active_model/mass_assignment_security'
+
+module ActiveModel
+  module MassAssignmentSecurity
+    
+  
+    def sanitize_for_mass_assignment_with_warning(attributes,&block)
+      debugger
+      sanitize_for_mass_assignment_without_warning(attributes,&block).tap{
+        return unless Config.whitelist[:mode] == :none
+        warn_when_mass_assignment_is_not_whitelist unless mass_assignment_authorizer === WhiteList
+      }
+    end
+    alias_method_chain :sanitize_for_mass_assignment, :warning
+    
+
+    def warn_when_mass_assignment_is_not_whitelist
+      only = Config.whitelist[:only]
+      if only 
+        return unless only.include?( self.class )
+      else
+        except = Config.whitelist[:except]
+        return if except && except.include?( self.class )
+      end        
+      
+      self.logger.debug WhinyMassAssignment::bc :yellow, "Mass assignment whitelisting has not been specified for #{ c [:bright, :red], self.class.name }" if self.logger
+      raise "Can't mass-assign protected attributes: #{attrs.join(', ')}" if Config.whitelist[:mode] == :raise
+    end  
+
+  end
+end

data/whiny-mass-assignment.gemspec

@@ -2,15 +2,15 @@
 
 Gem::Specification.new do |s|
   s.name = %q{whiny-mass-assignment}
-  s.version = "0.1.5"
+  s.version = "0.1.6"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
   s.authors = ["Paul Alexander"]
-  s.date = %q{2011-03-01}
+  s.date = %q{2011-03-18}
   s.description = %q{Complain loudly when protected attributes are set through mass assignment.}
   s.email = %q{paul@appsinyourpants.com}
-  s.extra_rdoc_files = ["LICENSE", "README.md", "lib/whiny-mass-assignment.rb", "lib/whiny-mass-assignment/color_escapes.rb", "lib/whiny-mass-assignment/configuration.rb", "lib/whiny-mass-assignment/sanitizer.rb", "lib/whiny_mass_assignment.rb", "tasks/spec.rake"]
-  s.files = ["Gemfile", "Gemfile.lock", "LICENSE", "Manifest", "README.md", "Rakefile", "lib/whiny-mass-assignment.rb", "lib/whiny-mass-assignment/color_escapes.rb", "lib/whiny-mass-assignment/configuration.rb", "lib/whiny-mass-assignment/sanitizer.rb", "lib/whiny_mass_assignment.rb", "rails/init.rb", "spec/config_spec.rb", "spec/sanitizer_spec.rb", "spec/spec_helper.rb", "tasks/spec.rake", "whiny-mass-assignment.gemspec"]
+  s.extra_rdoc_files = ["LICENSE", "README.md", "lib/whiny-mass-assignment.rb", "lib/whiny-mass-assignment/color_escapes.rb", "lib/whiny-mass-assignment/configuration.rb", "lib/whiny-mass-assignment/mass_assignment_security_overrides.rb", "lib/whiny-mass-assignment/sanitizer.rb", "lib/whiny_mass_assignment.rb", "tasks/spec.rake"]
+  s.files = ["Gemfile", "Gemfile.lock", "LICENSE", "Manifest", "README.md", "Rakefile", "lib/whiny-mass-assignment.rb", "lib/whiny-mass-assignment/color_escapes.rb", "lib/whiny-mass-assignment/configuration.rb", "lib/whiny-mass-assignment/mass_assignment_security_overrides.rb", "lib/whiny-mass-assignment/sanitizer.rb", "lib/whiny_mass_assignment.rb", "rails/init.rb", "spec/config_spec.rb", "spec/sanitizer_spec.rb", "spec/spec_helper.rb", "tasks/spec.rake", "whiny-mass-assignment.gemspec"]
   s.homepage = %q{https://github.com/appsinyourpants/whiny-mass-assignment}
   s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Whiny-mass-assignment", "--main", "README.md"]
   s.require_paths = ["lib"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: whiny-mass-assignment
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.6
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2011-03-01 00:00:00.000000000 -08:00
+date: 2011-03-18 00:00:00.000000000 -07:00
 default_executable: 
 dependencies: []
 description: Complain loudly when protected attributes are set through mass assignment.
@@ -22,6 +22,7 @@ extra_rdoc_files:
 - lib/whiny-mass-assignment.rb
 - lib/whiny-mass-assignment/color_escapes.rb
 - lib/whiny-mass-assignment/configuration.rb
+- lib/whiny-mass-assignment/mass_assignment_security_overrides.rb
 - lib/whiny-mass-assignment/sanitizer.rb
 - lib/whiny_mass_assignment.rb
 - tasks/spec.rake
@@ -35,6 +36,7 @@ files:
 - lib/whiny-mass-assignment.rb
 - lib/whiny-mass-assignment/color_escapes.rb
 - lib/whiny-mass-assignment/configuration.rb
+- lib/whiny-mass-assignment/mass_assignment_security_overrides.rb
 - lib/whiny-mass-assignment/sanitizer.rb
 - lib/whiny_mass_assignment.rb
 - rails/init.rb