[pkgsrc/trunk]: pkgsrc/www/ruby-rails-html-sanitizer www/ruby-rails-html-sani...

[taca <taca%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/f24b684ef471
branches:  trunk
changeset: 457648:f24b684ef471
user:      taca <taca%pkgsrc.org@localhost>
date:      Mon Aug 30 15:38:02 2021 +0000

description:
www/ruby-rails-html-sanitizer: udpate to 1.4.2

1.4.0 (2021-08-18)

* Processing Instructions are no longer allowed by Rails::Html::PermitScrubber

  Previously, a PI with a name (or "target") matching an allowed tag name
  was not scrubbed. There are no known security issues associated with these
  PIs, but similar to comments it's preferred to omit these nodes when
  possible from sanitized output.

  Fixes #115.

  Mike Dalessio


1.4.1 (2021-08-18)

* Fix regression in v1.4.0 that did not pass comment nodes to the scrubber.

  Some scrubbers will want to override the default behavior and allow
  comments, but v1.4.0 only passed through elements to the scrubber's
  keep_node? method.

  This change once again allows the scrubber to make the decision on comment
  nodes, but still skips other non-elements like processing instructions
  (see #115).

  Mike Dalessio


1.4.2 (2021-08-23)

* Slightly improve performance.

  Assuming elements are more common than comments, make one less method call
  per node.

diffstat:

 www/ruby-rails-html-sanitizer/Makefile |   8 +++++---
 www/ruby-rails-html-sanitizer/distinfo |  10 +++++-----
 2 files changed, 10 insertions(+), 8 deletions(-)

diffs (38 lines):

diff -r 4683254eccf7 -r f24b684ef471 www/ruby-rails-html-sanitizer/Makefile
--- a/www/ruby-rails-html-sanitizer/Makefile    Mon Aug 30 15:34:57 2021 +0000
+++ b/www/ruby-rails-html-sanitizer/Makefile    Mon Aug 30 15:38:02 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2020/03/20 17:54:27 taca Exp $
+# $NetBSD: Makefile,v 1.4 2021/08/30 15:38:02 taca Exp $
 
-DISTNAME=      rails-html-sanitizer-1.3.0
+DISTNAME=      rails-html-sanitizer-1.4.2
 CATEGORIES=    www
 
 MAINTAINER=    minskim%NetBSD.org@localhost
@@ -8,7 +8,9 @@
 COMMENT=       HTML sanitizer for Rails applications
 LICENSE=       mit
 
-DEPENDS+=      ${RUBY_PKGPREFIX}-loofah>=2.2.0:../../www/ruby-loofah
+DEPENDS+=      ${RUBY_PKGPREFIX}-loofah>=2.3<3:../../www/ruby-loofah
+
+USE_LANGUAGES= # empty
 
 .include "../../lang/ruby/gem.mk"
 .include "../../mk/bsd.pkg.mk"
diff -r 4683254eccf7 -r f24b684ef471 www/ruby-rails-html-sanitizer/distinfo
--- a/www/ruby-rails-html-sanitizer/distinfo    Mon Aug 30 15:34:57 2021 +0000
+++ b/www/ruby-rails-html-sanitizer/distinfo    Mon Aug 30 15:38:02 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.3 2020/03/20 17:54:27 taca Exp $
+$NetBSD: distinfo,v 1.4 2021/08/30 15:38:02 taca Exp $
 
-SHA1 (rails-html-sanitizer-1.3.0.gem) = 90c3c3d2c2cff685b1308b67ff441e94aae579d0
-RMD160 (rails-html-sanitizer-1.3.0.gem) = 73d30b8952a7dadfbb70d6dfb4025292f8103806
-SHA512 (rails-html-sanitizer-1.3.0.gem) = 01d67f750ffc6ac857e4dc47b77d66e02acc4488f353af97e2fc367590fe85107b631aaf8b32f61f9e1f375c93e1b24fbf966f738e35483f5174880a0ffe5ddb
-Size (rails-html-sanitizer-1.3.0.gem) = 16384 bytes
+SHA1 (rails-html-sanitizer-1.4.2.gem) = a8017ee65b75b61b1d487585eec4bd48b4191ac5
+RMD160 (rails-html-sanitizer-1.4.2.gem) = d1024ab6a0111d5b5996bd6dcd12e92c496806a3
+SHA512 (rails-html-sanitizer-1.4.2.gem) = 9f0872f1000c758918f66a889322d3393ec678604eb3b01fc21bbb861189ec04fcf05f5c9487bd5eeb63ce6d99a80064718c82bfce2daf25c07754979a2ed747
+Size (rails-html-sanitizer-1.4.2.gem) = 16896 bytes