kpriv
/
pkgsrc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

www/ruby-rails-html-sanitizer: update to 1.6.0 

1.6.0 (2023-05-26)

* Dependencies have been updated:

	- Loofah ~>2.21 and Nokogiri ~>1.14 for HTML5 parser support
	- As a result, required Ruby version is now >= 2.7.0

* Security updates will continue to be made on the 1.5.x release branch as
  long as Rails 6.1 (which supports Ruby 2.5) is still in security support.

  Mike Dalessio


* HTML5 standards-compliant sanitizers are now available on platforms
  supported by Nokogiri::HTML5. These are available as:

	- Rails::HTML5::FullSanitizer
	- Rails::HTML5::LinkSanitizer
	- Rails::HTML5::SafeListSanitizer

  And a new "vendor" is provided at Rails::HTML5::Sanitizer that can be used
  in a future version of Rails.

  Note that for symmetry Rails::HTML4::Sanitizer is also added, though its
  behavior is identical to the vendor class methods on
  Rails::HTML::Sanitizer.

  Users may call Rails::HTML::Sanitizer.best_supported_vendor to get back
  the HTML5 vendor if it's supported, else the legacy HTML4 vendor.

  Mike Dalessio

* Module namespaces have changed, but backwards compatibility is provided by
  aliases.

  The library defines three additional modules:

	- Rails::HTML for general functionality (replacing Rails::Html)
	- Rails::HTML4 containing sanitizers that parse content as HTML4
	- Rails::HTML5 containing sanitizers that parse content as HTML5

  The following aliases are maintained for backwards compatibility:

	- Rails::Html points to Rails::HTML
	- Rails::HTML::FullSanitizer points to Rails::HTML4::FullSanitizer
	- Rails::HTML::LinkSanitizer points to Rails::HTML4::LinkSanitizer
	- Rails::HTML::SafeListSanitizer points to Rails::HTML4::SafeListSanitizer

  Mike Dalessio

* LinkSanitizer always returns UTF-8 encoded strings. SafeListSanitizer and
  FullSanitizer already ensured this encoding.

  Mike Dalessio

* SafeListSanitizer allows time tag and lang attribute by default.

  Mike Dalessio

* The constant Rails::Html::XPATHS_TO_REMOVE has been removed. It's not
  necessary with the existing sanitizers, and should have been a private
  constant all along anyway.

  Mike Dalessio
This commit is contained in:
taca 2023-05-28 01:51:44 +00:00
parent d033028abe
commit d98f567996
3 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
www/ruby-rails-html-sanitizer/Makefile
View File

@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.7 2023/01/21 14:14:29 taca Exp $
# $NetBSD: Makefile,v 1.8 2023/05/28 01:51:44 taca Exp $
DISTNAME= rails-html-sanitizer-1.5.0
DISTNAME= rails-html-sanitizer-1.6.0
CATEGORIES= www
MAINTAINER= minskim@NetBSD.org

3
www/ruby-rails-html-sanitizer/PLIST
View File

@ -1,4 +1,4 @@
@comment $NetBSD: PLIST,v 1.2 2018/03/23 14:06:32 taca Exp $
@comment $NetBSD: PLIST,v 1.3 2023/05/28 01:51:44 taca Exp $
${GEM_HOME}/cache/${GEM_NAME}.gem
${GEM_LIBDIR}/CHANGELOG.md
${GEM_LIBDIR}/MIT-LICENSE
@ -7,6 +7,7 @@ ${GEM_LIBDIR}/lib/rails-html-sanitizer.rb
${GEM_LIBDIR}/lib/rails/html/sanitizer.rb
${GEM_LIBDIR}/lib/rails/html/sanitizer/version.rb
${GEM_LIBDIR}/lib/rails/html/scrubbers.rb
${GEM_LIBDIR}/test/rails_api_test.rb
${GEM_LIBDIR}/test/sanitizer_test.rb
${GEM_LIBDIR}/test/scrubbers_test.rb
${GEM_HOME}/specifications/${GEM_NAME}.gemspec

8
www/ruby-rails-html-sanitizer/distinfo
View File

@ -1,5 +1,5 @@
$NetBSD: distinfo,v 1.9 2023/01/21 14:14:29 taca Exp $
$NetBSD: distinfo,v 1.10 2023/05/28 01:51:44 taca Exp $
BLAKE2s (rails-html-sanitizer-1.5.0.gem) = a5743d25a526c25baf3249bfcf9d1f9e955998e26efdcaa47230a147889c4cb6
SHA512 (rails-html-sanitizer-1.5.0.gem) = 533a203d34b0f77b70258fc1b610caf1d4910da48224b136774d094ee8fa74b5cd9f3b1719118334489a41d743b97592539935b05b07770cd745e03634422214
Size (rails-html-sanitizer-1.5.0.gem) = 19456 bytes
BLAKE2s (rails-html-sanitizer-1.6.0.gem) = 136b4a5dc933f2d4d5e5e5fefb1365cc93c055af7dbe7a2c030423eac3a08ffb
SHA512 (rails-html-sanitizer-1.6.0.gem) = 265c093872b43794be02a8b1d2574be8270762b46c2b0d930159d3b41e06b897ed8b6edf3b219e0e71591fa5f7d38107ed8d332cebd3dfe4c37c6d06b7b5fa12
Size (rails-html-sanitizer-1.6.0.gem) = 23552 bytes