kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

www/ruby-rails-html-sanitizer: udpate to 1.4.2

Browse source 
1.4.0 (2021-08-18)

* Processing Instructions are no longer allowed by Rails::Html::PermitScrubber

  Previously, a PI with a name (or "target") matching an allowed tag name
  was not scrubbed. There are no known security issues associated with these
  PIs, but similar to comments it's preferred to omit these nodes when
  possible from sanitized output.

  Fixes #115.

  Mike Dalessio


1.4.1 (2021-08-18)

* Fix regression in v1.4.0 that did not pass comment nodes to the scrubber.

  Some scrubbers will want to override the default behavior and allow
  comments, but v1.4.0 only passed through elements to the scrubber's
  keep_node? method.

  This change once again allows the scrubber to make the decision on comment
  nodes, but still skips other non-elements like processing instructions
  (see #115).

  Mike Dalessio


1.4.2 (2021-08-23)

* Slightly improve performance.

  Assuming elements are more common than comments, make one less method call
  per node.
This commit is contained in:
taca 2021-08-30 15:38:02 +00:00
parent e07aa90519
commit 920767b025
2 changed files with 10 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
www/ruby-rails-html-sanitizer/Makefile
View file

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.3 2020/03/20 17:54:27 taca Exp $
# $NetBSD: Makefile,v 1.4 2021/08/30 15:38:02 taca Exp $
DISTNAME= rails-html-sanitizer-1.3.0
DISTNAME= rails-html-sanitizer-1.4.2
CATEGORIES= www
MAINTAINER= minskim@NetBSD.org
@ -8,7 +8,9 @@ HOMEPAGE= https://github.com/rails/rails-html-sanitizer
COMMENT= HTML sanitizer for Rails applications
LICENSE= mit
DEPENDS+= ${RUBY_PKGPREFIX}-loofah>=2.2.0:../../www/ruby-loofah
DEPENDS+= ${RUBY_PKGPREFIX}-loofah>=2.3<3:../../www/ruby-loofah
USE_LANGUAGES= # empty
.include "../../lang/ruby/gem.mk"
.include "../../mk/bsd.pkg.mk"

10
www/ruby-rails-html-sanitizer/distinfo
View file

@ -1,6 +1,6 @@
$NetBSD: distinfo,v 1.3 2020/03/20 17:54:27 taca Exp $
$NetBSD: distinfo,v 1.4 2021/08/30 15:38:02 taca Exp $
SHA1 (rails-html-sanitizer-1.3.0.gem) = 90c3c3d2c2cff685b1308b67ff441e94aae579d0
RMD160 (rails-html-sanitizer-1.3.0.gem) = 73d30b8952a7dadfbb70d6dfb4025292f8103806
SHA512 (rails-html-sanitizer-1.3.0.gem) = 01d67f750ffc6ac857e4dc47b77d66e02acc4488f353af97e2fc367590fe85107b631aaf8b32f61f9e1f375c93e1b24fbf966f738e35483f5174880a0ffe5ddb
Size (rails-html-sanitizer-1.3.0.gem) = 16384 bytes
SHA1 (rails-html-sanitizer-1.4.2.gem) = a8017ee65b75b61b1d487585eec4bd48b4191ac5
RMD160 (rails-html-sanitizer-1.4.2.gem) = d1024ab6a0111d5b5996bd6dcd12e92c496806a3
SHA512 (rails-html-sanitizer-1.4.2.gem) = 9f0872f1000c758918f66a889322d3393ec678604eb3b01fc21bbb861189ec04fcf05f5c9487bd5eeb63ce6d99a80064718c82bfce2daf25c07754979a2ed747
Size (rails-html-sanitizer-1.4.2.gem) = 16896 bytes