Received: by mail.netbsd.org (Postfix, from userid 605) id 8DC0F84EDE; Mon, 30 Aug 2021 15:38:04 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id C850284ED2 for ; Mon, 30 Aug 2021 15:38:03 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id wZ5JtAtfu81q for ; Mon, 30 Aug 2021 15:38:03 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 2F0BB84CDA for ; Mon, 30 Aug 2021 15:38:03 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 22FA5FA97; Mon, 30 Aug 2021 15:38:03 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1630337883148920" MIME-Version: 1.0 Date: Mon, 30 Aug 2021 15:38:03 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/www/ruby-rails-html-sanitizer To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20210830153803.22FA5FA97@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1630337883148920 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Mon Aug 30 15:38:03 UTC 2021 Modified Files: pkgsrc/www/ruby-rails-html-sanitizer: Makefile distinfo Log Message: www/ruby-rails-html-sanitizer: udpate to 1.4.2 1.4.0 (2021-08-18) * Processing Instructions are no longer allowed by Rails::Html::PermitScrubber Previously, a PI with a name (or "target") matching an allowed tag name was not scrubbed. There are no known security issues associated with these PIs, but similar to comments it's preferred to omit these nodes when possible from sanitized output. Fixes #115. Mike Dalessio 1.4.1 (2021-08-18) * Fix regression in v1.4.0 that did not pass comment nodes to the scrubber. Some scrubbers will want to override the default behavior and allow comments, but v1.4.0 only passed through elements to the scrubber's keep_node? method. This change once again allows the scrubber to make the decision on comment nodes, but still skips other non-elements like processing instructions (see #115). Mike Dalessio 1.4.2 (2021-08-23) * Slightly improve performance. Assuming elements are more common than comments, make one less method call per node. To generate a diff of this commit: cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-rails-html-sanitizer/Makefile \ pkgsrc/www/ruby-rails-html-sanitizer/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1630337883148920 Content-Disposition: inline Content-Length: 2167 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/ruby-rails-html-sanitizer/Makefile diff -u pkgsrc/www/ruby-rails-html-sanitizer/Makefile:1.3 pkgsrc/www/ruby-rails-html-sanitizer/Makefile:1.4 --- pkgsrc/www/ruby-rails-html-sanitizer/Makefile:1.3 Fri Mar 20 17:54:27 2020 +++ pkgsrc/www/ruby-rails-html-sanitizer/Makefile Mon Aug 30 15:38:02 2021 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.3 2020/03/20 17:54:27 taca Exp $ +# $NetBSD: Makefile,v 1.4 2021/08/30 15:38:02 taca Exp $ -DISTNAME= rails-html-sanitizer-1.3.0 +DISTNAME= rails-html-sanitizer-1.4.2 CATEGORIES= www MAINTAINER= minskim@NetBSD.org @@ -8,7 +8,9 @@ HOMEPAGE= https://github.com/rails/rails COMMENT= HTML sanitizer for Rails applications LICENSE= mit -DEPENDS+= ${RUBY_PKGPREFIX}-loofah>=2.2.0:../../www/ruby-loofah +DEPENDS+= ${RUBY_PKGPREFIX}-loofah>=2.3<3:../../www/ruby-loofah + +USE_LANGUAGES= # empty .include "../../lang/ruby/gem.mk" .include "../../mk/bsd.pkg.mk" Index: pkgsrc/www/ruby-rails-html-sanitizer/distinfo diff -u pkgsrc/www/ruby-rails-html-sanitizer/distinfo:1.3 pkgsrc/www/ruby-rails-html-sanitizer/distinfo:1.4 --- pkgsrc/www/ruby-rails-html-sanitizer/distinfo:1.3 Fri Mar 20 17:54:27 2020 +++ pkgsrc/www/ruby-rails-html-sanitizer/distinfo Mon Aug 30 15:38:02 2021 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.3 2020/03/20 17:54:27 taca Exp $ +$NetBSD: distinfo,v 1.4 2021/08/30 15:38:02 taca Exp $ -SHA1 (rails-html-sanitizer-1.3.0.gem) = 90c3c3d2c2cff685b1308b67ff441e94aae579d0 -RMD160 (rails-html-sanitizer-1.3.0.gem) = 73d30b8952a7dadfbb70d6dfb4025292f8103806 -SHA512 (rails-html-sanitizer-1.3.0.gem) = 01d67f750ffc6ac857e4dc47b77d66e02acc4488f353af97e2fc367590fe85107b631aaf8b32f61f9e1f375c93e1b24fbf966f738e35483f5174880a0ffe5ddb -Size (rails-html-sanitizer-1.3.0.gem) = 16384 bytes +SHA1 (rails-html-sanitizer-1.4.2.gem) = a8017ee65b75b61b1d487585eec4bd48b4191ac5 +RMD160 (rails-html-sanitizer-1.4.2.gem) = d1024ab6a0111d5b5996bd6dcd12e92c496806a3 +SHA512 (rails-html-sanitizer-1.4.2.gem) = 9f0872f1000c758918f66a889322d3393ec678604eb3b01fc21bbb861189ec04fcf05f5c9487bd5eeb63ce6d99a80064718c82bfce2daf25c07754979a2ed747 +Size (rails-html-sanitizer-1.4.2.gem) = 16896 bytes --_----------=_1630337883148920--