yajl-ruby 0.8.0 → 0.8.1

data/CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.8.1 (February 11th, 2011)
+* fixed a retart bug where Yajl::VERSION wasn't defined when explicitly requiring yajl/http_stream
+
 ## 0.8.0 (February 2nd, 2011)
 * added a new html_safe option to Yajl::Encoder to escape '/' characters for use in the DOM
 * moved away from Jeweler to a Bundler/manual gemfile management setup

data/README.rdoc

@@ -197,6 +197,16 @@ a string when it's finished. In that case, just don't provide and IO or block (o
 
 You can also use Yajl::Bzip2::StreamWriter and Yajl::Deflate::StreamWriter. So you can pick whichever fits your CPU/bandwidth sweet-spot.
 
+=== HTML Safety
+
+If you plan on embedding the output from the encoder in the DOM, you'll want to make sure you use the html_safe option on the encoder. This will escape all '/' characters to ensure no closing tags can be injected, preventing XSS.
+
+Meaning the following should be perfectly safe:
+
+ <script type="text/javascript">
+   escaped_str = <%= Yajl::Encoder.encode("</script><script>alert('hi!');</script>", :html_safe => true) %>;
+ </script>
+
 == JSON gem Compatibility API
 
 The JSON gem compatibility API isn't enabled by default. You have to explicitly require it like so:

data/lib/yajl/http_stream.rb

@@ -1,7 +1,8 @@
 # encoding: UTF-8
-require 'socket' unless defined?(Socket)
-require 'yajl' unless defined?(Yajl::Parser)
-require 'uri' unless defined?(URI)
+require 'socket'
+require 'yajl'
+require 'yajl/version' unless defined? Yajl::VERSION
+require 'uri'
 
 module Yajl
   # This module is for making HTTP requests to which the response bodies (and possibly requests in the near future)

data/lib/yajl/version.rb

@@ -1,3 +1,3 @@
 module Yajl
-  VERSION = "0.8.0"
+  VERSION = "0.8.1"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: yajl-ruby
 version: !ruby/object:Gem::Version 
-  hash: 63
+  hash: 61
   prerelease: 
   segments: 
   - 0
   - 8
-  - 0
-  version: 0.8.0
+  - 1
+  version: 0.8.1
 platform: ruby
 authors: 
 - Brian Lopez
@@ -16,7 +16,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-02-02 00:00:00 -08:00
+date: 2011-02-11 00:00:00 -08:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency