Validation regex generates a warning in Rails 4+

[danblaker]

slug/lib/slug/slug.rb

Line 31 in 9dd2441

validates self.slug_column, :format => { :with => /^[a-z0-9-]+$/, :message => "contains invalid characters. Only downcase letters, numbers, and '-' are allowed." }

Per Rails regex security guidelines, \A and \z should be used instead of ^ and $.

I stumbled upon this issue while using the Annotate gem, which generates the following warning while attempting to annotate models using slugs:

Unable to annotate app/models/sample_model.rb: The provided regular expression is using multiline anchors (^ or $), which may present a security risk. Did you mean to use \A and \z, or forgot to add the :multiline => true option?

[danblaker]

This is addressed by pull request #16

[bkoski]

This is now fixed, via 20a6987 and #16