@@ -55,14 +55,14 @@ Gem::Specification.new do |s| s.add_runtime_dependency(%q<curb>, [">= 0.2.3"]) s.add_runtime_dependency(%q<builder>, [">= 2.1.2"]) s.add_runtime_dependency(%q<activesupport>, [">=2.0.0"]) - s.add_runtime_dependency(%q<dryopteris>, [">= 0.0.0"]) + s.add_runtime_dependency(%q<loofah>, [">= 0.3.1"]) else s.add_dependency(%q<nokogiri>, ["> 0.0.0"]) s.add_dependency(%q<sax-machine>, [">= 0.0.12"]) s.add_dependency(%q<curb>, [">= 0.2.3"]) s.add_dependency(%q<builder>, [">= 2.1.2"]) s.add_dependency(%q<activesupport>, [">=2.0.0"]) - s.add_dependency(%q<dryopteris>, [">= 0.0.0"]) + s.add_dependency(%q<loofah>, [">= 0.3.1"]) end else s.add_dependency(%q<nokogiri>, ["> 0.0.0"]) @@ -70,6 +70,6 @@ Gem::Specification.new do |s| s.add_dependency(%q<curb>, [">= 0.2.3"]) s.add_dependency(%q<builder>, [">= 2.1.2"]) s.add_dependency(%q<activesupport>, [">=2.0.0"]) - s.add_dependency(%q<dryopteris>, [">= 0.0.0"]) + s.add_dependency(%q<loofah>, [">= 0.3.1"]) end end \ No newline at end of file feedzirra.gemspec @@ -4,6 +4,6 @@ class String end def sanitize - Dryopteris.sanitize(self) + Loofah.scrub_fragment(self, :prune).to_s end end \ No newline at end of file lib/core_ext/string.rb @@ -22,16 +22,16 @@ describe Feedzirra::FeedUtilities do end it "should provide a sanitized title" do - new_title = "<script>" + @entry.title + new_title = "<script>this is not safe</script>" + @entry.title @entry.title = new_title - @entry.title.sanitize.should == Dryopteris.sanitize(new_title) + @entry.title.sanitize.should == Loofah.scrub_fragment(new_title, :prune).to_s end it "should sanitize content in place" do new_content = "<script>" + @entry.content @entry.content = new_content.dup - @entry.content.sanitize!.should == Dryopteris.sanitize(new_content) - @entry.content.should == Dryopteris.sanitize(new_content) + @entry.content.sanitize!.should == Loofah.scrub_fragment(new_content, :prune).to_s + @entry.content.should == Loofah.scrub_fragment(new_content, :prune).to_s end it "should sanitize things in place" do @@ -39,9 +39,9 @@ describe Feedzirra::FeedUtilities do @entry.author += "<script>" @entry.content += "<script>" - cleaned_title = Dryopteris.sanitize(@entry.title) - cleaned_author = Dryopteris.sanitize(@entry.author) - cleaned_content = Dryopteris.sanitize(@entry.content) + cleaned_title = Loofah.scrub_fragment(@entry.title, :prune).to_s + cleaned_author = Loofah.scrub_fragment(@entry.author, :prune).to_s + cleaned_content = Loofah.scrub_fragment(@entry.content, :prune).to_s @entry.sanitize! @entry.title.should == cleaned_title spec/feedzirra/feed_entry_utilities_spec.rb 0e41f942a0b68970c8341ffc9067f3e7feca683f Paul Dix paul@pauldix.net http://github.com/pauldix/feedzirra/commit/4f2c36848114ceb78709c3fe78bcf9e9c1c27845 4f2c36848114ceb78709c3fe78bcf9e9c1c27845 2009-10-20T11:02:32-07:00 2009-10-20T11:02:32-07:00 updated feedzirra to use loofah instead of dryopteris 3f13d7a81e528125db7a0764fe6ef4837f41be57 Paul Dix paul@pauldix.net