ci: test against old versions of Nokogiri and Loofah

to maintain backwards compatibility for a while longer

.github/workflows/ci.yml

@@ -40,6 +40,18 @@ jobs:
           bundler-cache: true
       - run: bundle exec rake
 
+  cruby-old-dependencies:
+    runs-on: ubuntu-latest
+    env:
+      TEST_WITH_OLD_DEPENDENCIES: t
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "2.5"
+          bundler-cache: true
+      - run: bundle exec rake
+
   cruby-nokogiri-system-libraries:
     runs-on: ubuntu-20.04
     steps:

Gemfile

@@ -15,6 +15,7 @@ group :rubocop do
   gem "rubocop-rails", require: false
 end
 
-# specify gem versions for old rubies
-gem "nokogiri", RUBY_VERSION < "2.1" ? "~> 1.6.0" : ">= 1.7"
-gem "activesupport", RUBY_VERSION < "2.2.2" ? "~> 4.2.0" : ">= 5"
+if ENV["TEST_WITH_OLD_DEPENDENCIES"]
+  gem "nokogiri", "< 1.12.0"
+  gem "loofah", "< 2.21.0"
+end

test/sanitizer_test.rb

@@ -3,7 +3,8 @@
 require "minitest/autorun"
 require "rails-html-sanitizer"
 
-puts Nokogiri::VERSION_INFO
+puts "nokogiri version info: #{Nokogiri::VERSION_INFO}"
+puts "html5 support: #{Rails::HTML::Sanitizer.html5_support?}"
 
 #
 #  NOTE that many of these tests contain multiple acceptable results.