module Haml::Helpers::XssMods
def self.included(base)
def self.included(base) %w[html_escape find_and_preserve preserve list_of surround precede succeed capture_haml haml_concat haml_internal_concat haml_indent escape_once].each do |name| base.send(:alias_method, "#{name}_without_haml_xss", name) base.send(:alias_method, name, "#{name}_with_haml_xss") end end
def capture_haml_with_haml_xss(*args, &block)
def capture_haml_with_haml_xss(*args, &block) Haml::Util.html_safe(capture_haml_without_haml_xss(*args, &block)) end
def escape_once_with_haml_xss(*args)
def escape_once_with_haml_xss(*args) Haml::Util.html_safe(escape_once_without_haml_xss(*args)) end
def find_and_preserve_with_haml_xss(*args, &block)
def find_and_preserve_with_haml_xss(*args, &block) Haml::Util.html_safe(find_and_preserve_without_haml_xss(*args, &block)) end
def haml_concat_with_haml_xss(text = "")
Input will be escaped unless this is in a `with_raw_haml_concat`
def haml_concat_with_haml_xss(text = "") raw = instance_variable_defined?(:@_haml_concat_raw) ? @_haml_concat_raw : false if raw haml_internal_concat_raw text else haml_internal_concat text end ErrorReturn.new("haml_concat") end
def haml_indent_with_haml_xss
def haml_indent_with_haml_xss Haml::Util.html_safe(haml_indent_without_haml_xss) end
def haml_internal_concat_with_haml_xss(text="", newline=true, indent=true)
def haml_internal_concat_with_haml_xss(text="", newline=true, indent=true) haml_internal_concat_without_haml_xss(haml_xss_html_escape(text), newline, indent) end
def haml_xss_html_escape(text)
Escapes the HTML in the text if and only if
def haml_xss_html_escape(text) return text unless Haml::Util.rails_xss_safe? && haml_buffer.options[:escape_html] html_escape(text) end
def html_escape_with_haml_xss(text)
Don't escape text that's already safe,
def html_escape_with_haml_xss(text) str = text.to_s return text if str.html_safe? Haml::Util.html_safe(html_escape_without_haml_xss(str)) end
def list_of_with_haml_xss(*args, &block)
def list_of_with_haml_xss(*args, &block) Haml::Util.html_safe(list_of_without_haml_xss(*args, &block)) end
def precede_with_haml_xss(str, &block)
def precede_with_haml_xss(str, &block) Haml::Util.html_safe(precede_without_haml_xss(haml_xss_html_escape(str), &block)) end
def preserve_with_haml_xss(*args, &block)
def preserve_with_haml_xss(*args, &block) Haml::Util.html_safe(preserve_without_haml_xss(*args, &block)) end
def succeed_with_haml_xss(str, &block)
def succeed_with_haml_xss(str, &block) Haml::Util.html_safe(succeed_without_haml_xss(haml_xss_html_escape(str), &block)) end
def surround_with_haml_xss(front, back = front, &block)
def surround_with_haml_xss(front, back = front, &block) Haml::Util.html_safe( surround_without_haml_xss( haml_xss_html_escape(front), haml_xss_html_escape(back), &block)) end