Skip to content

Commit 7a427ff

Browse files
committed
Made compatible with active support json encoding for escaping script tags
1 parent 8d8aab3 commit 7a427ff

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

lib/gon/escaper.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ module Escaper
33
class << self
44

55
GON_JS_ESCAPE_MAP = {
6-
'</' => '<\/'
6+
'</' => '\u003C/'
77
}
88

99
def escape(javascript)

spec/gon/basic_spec.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@
6060
it 'outputs correct js with a script string' do
6161
Gon.str = %q(</script><script>alert('!')</script>)
6262
@base.include_gon.should == '<script>window.gon = {};' +
63-
%q(gon.str="<\\/script><script>alert('!')<\\/script>";) +
63+
%q(gon.str="\\u003C/script><script>alert('!')\\u003C/script>";) +
6464
'</script>'
6565
end
6666

spec/gon/global_spec.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@
7272
it 'outputs correct js with a script string' do
7373
Gon.global.str = %q(</script><script>alert('!')</script>)
7474
@base.include_gon.should == "<script>window.gon = {};" +
75-
"gon.global={\"str\":\"<\\/script><script>alert('!')<\\/script>\"};" +
75+
"gon.global={\"str\":\"\\u003C/script><script>alert('!')\\u003C/script>\"};" +
7676
"</script>"
7777
end
7878

0 commit comments

Comments
 (0)