dm-sanitizer

github.com/pat/dm-sanitizer

Description:

This package lets DataMapper properties be easily sanitized using Sanitize.

Features and problems:

Features

Sanitize String and Text properties by default (configurable)
Per property sanitization modes
User defined sanitization modes

problems

None known. Contact me if you find them.

Synopsis:

require 'rubygems'
require 'dm-core'
require 'dm-migrations'
require 'dm-sanitizer'

DataMapper.setup(:default, 'sqlite3::memory:')

class SomeModel
  include DataMapper::Resource

  property :id,     Serial
  property :title,  String
  property :story,  Text
end
SomeModel.auto_migrate!

obj = SomeModel.new
obj.title = '<h1>Hi there</h1>'
obj.story = '<em>Some sanitization <strong>needed</strong></em>'
obj.save
puts obj.title == 'Hi there'
puts obj.story == 'Some sanitization needed'

class SomeOtherModel
  include DataMapper::Resource
  sanitize :default_mode => :basic, :modes => {:restricted => :title}, :exclude => [:junk]

  property :id,     Serial
  property :title,  String
  property :story,  Text
  property :junk,   Text
end
SomeOtherModel.auto_migrate!

obj = SomeOtherModel.new
obj.title = '<h1><strong>Hi</strong> <a href="#">there</a></h1>'
obj.story = '<h3><a href="#">Scince</a> knows many gitiks</h3>'
obj.junk  = '<script>alert("xss")</script>'
obj.save

puts obj.title == '<strong>Hi</strong> there'
puts obj.story == '<a href="#" rel="nofollow">Scince</a> knows many gitiks'
puts obj.junk  == '<script>alert("xss")</script>'

Requirements:

DataMapper (dm-core)
Sanitize (sanitize)

Installation:

sudo gem install dm-sanitizer

License

(The MIT License)

See LICENSE for details.