test/models/group.rb @@ -34,7 +34,7 @@ module XssTerminate field = column.name.to_sym value = self[field] - next if value.nil? + next if value.nil? || !value.is_a?(String) if xss_terminate_options[:except].include?(field) next lib/xss_terminate.rb @@ -37,4 +37,13 @@ ActiveRecord::Schema.define(:version => 0) do t.text :data t.timestamps end + + create_table :groups, :force => true do |t| + t.column :person_id, :integer + t.column :title, :string + t.column :description, :string + t.column :members, :text + t.timestamps + end + end test/schema.rb @@ -13,4 +13,5 @@ require File.join(File.dirname(__FILE__), 'models/person') require File.join(File.dirname(__FILE__), 'models/entry') require File.join(File.dirname(__FILE__), 'models/comment') require File.join(File.dirname(__FILE__), 'models/message') -require File.join(File.dirname(__FILE__), 'models/review') \ No newline at end of file +require File.join(File.dirname(__FILE__), 'models/review') +require File.join(File.dirname(__FILE__), 'models/group') \ No newline at end of file test/setup_test.rb @@ -69,4 +69,15 @@ class XssTerminateTest < Test::Unit::TestCase assert !c.save assert_not_nil c.errors.on(:title) end + + def test_valid_work_with_serialize_fields + g = Group.new(:title => "XSS Terminate group", :description => 'desc', :members => [1,2,3]) + assert g.save + end + + def test_valid_work_with_number_fields + g = Group.new(:title => "XSS Terminate group", :description => 123456, :members => {:hash => 'rocket'}) + assert g.save + end + end test/xss_terminate_test.rb 659ee5727affec986adbd54207f6abd02a66a155 Shaliko Usubov shaliko@ezid.ru http://github.com/look/xss_terminate/commit/724aba589e2e753e7b0cfaf3196548f493b169da 724aba589e2e753e7b0cfaf3196548f493b169da 2009-06-14T12:59:55-07:00 2009-05-17T00:21:50-07:00 Add valid work with serialize field Signed-off-by: Luke Francl <look@recursion.org> 85985d9dde24d29ee36df71a6ce0fbb39852734e Luke Francl look@recursion.org