Release 4.1.3

Add GPG key

.travis.yml

@@ -1,11 +1,12 @@
 rvm:
-  - 2.0.0
   - 2.1.0
   - 2.1.1
   - 2.2.2
   - 2.3.0
   - 2.4.0
-  - jruby-19mode
+  - jruby-9.1.8.0
+jdk:
+  - oraclejdk8
 before_install:
  - sudo apt-get update
  - sudo apt-get install libicu-dev

CONTRIBUTING.md

@@ -21,6 +21,10 @@ Before submitting an issue, **please carefully look through the following places
 
 Lastly, please **consider helping out** by opening a Pull Request!
 
+Serious bugs can be reported directly to the maintainers using these GPG keys:
+
+* [@dometto](https://pgp.mit.edu/pks/lookup?op=vindex&search=0xD637E455CD3E27BF)
+
 ## Opening a Pull Request
 
 Pull Requests fixing bugs, implementing new features, or updating documentation and dependencies are all very welcome! If you would like to help out with the project, you can pick an open issue from the issue tracker. We're more than happy to help you get started! Here's how you can proceed:

HISTORY.md

@@ -1,3 +1,7 @@
+# 4.1.2 /2017-08-07
+
+* Lock to a newer version of gollum-lib to avoid installing an outdated and vulnerable dependency (nokogiri) on ruby 2.0. See https://github.com/gollum/gollum-lib/pull/279. Note: this breaks semantic versioning so those using outdated rubies will discover the problem on update.
+
 # 4.1.0 /2017-03-09
 
 * Added file deletion functionality to file view

gollum.gemspec

@@ -5,8 +5,8 @@ Gem::Specification.new do |s|
   s.required_ruby_version = '>= 1.9'
 
   s.name              = 'gollum'
-  s.version           = '4.1.1'
-  s.date              = '2017-04-17'
+  s.version           = '4.1.3'
+  s.date              = '2018-09-17'
   s.rubyforge_project = 'gollum'
   s.license           = 'MIT'
 
@@ -24,7 +24,7 @@ Gem::Specification.new do |s|
   s.rdoc_options = ['--charset=UTF-8']
   s.extra_rdoc_files = %w[README.md LICENSE]
 
-  s.add_dependency 'gollum-lib', '~> 4.0', '>= 4.0.1'
+  s.add_dependency 'gollum-lib', '>= 4.2.9'
   s.add_dependency 'kramdown', '~> 1.9.0'
   s.add_dependency 'sinatra', '~> 1.4', '>= 1.4.4'
   s.add_dependency 'mustache', ['>= 0.99.5', '< 1.0.0']

lib/gollum.rb

@@ -16,7 +16,7 @@ require File.expand_path('../gollum/uri_encode_component', __FILE__)
 $KCODE = 'U' if RUBY_VERSION[0, 3] == '1.8'
 
 module Gollum
-  VERSION = '4.1.1'
+  VERSION = '4.1.3'
 
   def self.assets_path
     ::File.expand_path('gollum/public', ::File.dirname(__FILE__))

lib/gollum/app.rb

@@ -490,11 +490,11 @@ module Precious
     }x do |path|
       @path        = extract_path(path) if path
       wiki_options = settings.wiki_options.merge({ :page_file_dir => @path })
-      wiki         = Gollum::Wiki.new(settings.gollum_path, wiki_options)
-      @results     = wiki.pages
-      @results     += wiki.files if settings.wiki_options[:show_all]
+      @wiki         = Gollum::Wiki.new(settings.gollum_path, wiki_options)
+      @results     = @wiki.pages
+      @results     += @wiki.files if settings.wiki_options[:show_all]
       @results     = @results.sort_by { |p| p.name.downcase } # Sort Results alphabetically, fixes 922
-      @ref         = wiki.ref
+      @ref         = @wiki.ref
       mustache :pages
     end
 

lib/gollum/views/pages.rb

@@ -23,7 +23,7 @@ module Precious
             end
           end
 
-          breadcrumb.join(" / ")
+          @wiki.sanitizer.clean(breadcrumb.join(" / "))
         else
           "Home"
         end
@@ -60,7 +60,7 @@ module Precious
           result = Hash[folders.sort_by{| key, value | key.downcase} ].values.join("\n") + "\n"
           result += Hash[page_files.sort_by{ | key, value | key.downcase } ].values.join("\n")
 
-          result
+          @wiki.sanitizer.clean(result)
         else
           ""
         end

test/test_pages_view.rb

@@ -2,6 +2,18 @@
 require File.expand_path(File.join(File.dirname(__FILE__), 'helper'))
 require File.expand_path '../../lib/gollum/views/pages', __FILE__
 
+class FakeSane
+  def clean(data)
+    data
+  end
+end
+
+class FakeWiki
+  def sanitizer
+    FakeSane.new
+  end
+end
+
 FakePageResult = Struct.new(:path) do
   def name
     File.basename(path, File.extname(path)).gsub("-", " ")
@@ -27,6 +39,7 @@ end
 context "Precious::Views::Pages" do
   setup do
     @page = Precious::Views::Pages.new
+    @page.instance_variable_set("@wiki", FakeWiki.new)
   end
 
   test "breadcrumb" do