Main Branch | Dev Branch |
---|---|
Index
- Description
- Requirements
- Installation
- ChangeLog
- Sanitized::String
- Sanitized::Decimal
- Sanitized::Float
- Sanitized::Integer
- Sanitized::BigInteger
- Sanitized::DateTime
- Custom Code
- Contributing
- Security Policy
- Code of Conduct
- License
Never trust user input - EVER!
Before validating input, it's common practice to sanitize it; removing leading and trailing spaces, downcasing emails, reducing multiple spaces between names to a single space, etc.
Sanitized simplifies the process of cleaning input data, significantly reducing the callbacks and custom methods normally used to handle the issue.
As a suite of ActiveModel::Type
helpers, Sanitized applies the selected options
every time, even when skipping validations, callbacks or directly setting with
:update_columns
.
The built-in options are mapped direct to the standard Ruby and ActiveSupport context methods for String, Integer, Float, etc.
And because every application is original, helpers are easily extended with your own custom code, for those unique edge cases you need to catch.
Requirements
- Ruby 2.5+
- ActiveRecord 5.0+
Installation
Add this line to your Gemfile:
gem 'sanitized'
ChangeLog
All changes can be found in the ChangeLog file.
Sanitized::String
This example sanitizes a string by removing all whitespace at the beginning & end of the sting, reducing multiple whitespace in the middle to a single space, and changing everything to lower case.
class User < ActiveRecord::Base
attribute :name, Sanitized::String.new(:squish, :downcase)
end
user = User.new(name: " Code Meister \n")
user.name #=> "code meister"
Options
All options that change the string's case are mutually exclusive. For example, you cannot use
:downcase
and :upcase
at the same time.
- :capitalize
- :camelcase
- :camelize
- :chomp
- :dasherize
- :downcase
- :humanize
- :lstrip
- :parameterize
- :rstrip
- :singularize
- :squish
- :strip
- :swapcase
- :titlecase
- :titleize
- :underscore
- :upcase
- :upcase_first
Sanitized::Decimal
This example sanitizes a Decimal by truncating it to 0 decimal places.
class User < ActiveRecord::Base
attribute :age, Sanitized::Decimal.new(:truncate)
end
user = User.new(age: 13.75)
user.age #=> 13
Options
Both :ceil
and :floor
are mutually exclusive, as are :abs
and :magnitude
.
- :abs
- :ceil
- :floor
- :magnitude
- :truncate
Sanitized::Float
This example sanitizes a Float by ensuring its absolute value.
class User < ActiveRecord::Base
attribute :age, Sanitized::Float.new(:abs)
end
user = User.new(age: -23)
user.age #=> 23
Options
Both :ceil
and :floor
are mutually exclusive, as are :abs
and :magnitude
.
- :abs
- :ceil
- :floor
- :magnitude
- :truncate
Sanitized::Integer
This example sanitizes an Integer by ensuring its absolute value.
class User < ActiveRecord::Base
attribute :age, Sanitized::Integer.new(:abs)
end
user = User.new(age: -23)
user.age #=> 23
Standard Options
- :abs
Sanitized::BigInteger
This example sanitizes an BigInteger by ensuring its absolute value.
class User < ActiveRecord::Base
attribute :age, Sanitized::BigInteger.new(:abs)
end
user = User.new(age: -23)
user.age #=> 23
Options
- :abs
Sanitized::DateTime
This example sanitizes a DateTime by setting it to the beginning of the month.
class User < ActiveRecord::Base
attribute :event_at, Sanitized::DateTime.new(:beginning_of_month)
end
user = User.new(event_at: DateTime.new(2001,2,3,4,5,6))
user.event_at.to_s #=> "Thu, 01 Feb 2001 00:00:00"
Options
All option are mutually exclusive, so only one may be used at any time.
- :at_beginning_of_day
- :at_beginning_of_hour
- :at_beginning_of_minute
- :at_beginning_of_month
- :at_beginning_of_quarter
- :at_beginning_of_week
- :at_beginning_of_year
- :at_end_of_day
- :at_end_of_hour
- :at_end_of_minute
- :at_end_of_month
- :at_end_of_quarter
- :at_end_of_week
- :at_end_of_year
- :at_midday
- :at_middle_of_day
- :at_midnight
- :at_noon
- :beginning_of_day
- :beginning_of_hour
- :beginning_of_minute
- :beginning_of_month
- :beginning_of_quarter
- :beginning_of_week
- :beginning_of_year
- :end_of_month
- :end_of_quarter
- :end_of_week
- :end_of_year
- :end_of_day
- :end_of_hour
- :end_of_minute
- :midday
- :middle_of_day
- :midnight
- :noon
Custom Code
You can add you own custom code by passing in a block:
class User < ActiveRecord::Base
name_sanitizer = Sanitized::String.new(:squash, :downcase) do |name|
if name == 'codemeister'
'Godzilla'
else
name
end
end
attribute :name, name_sanitizer
end
user = User.new(name: " CodeMeister ")
user.name #=> "Godzilla"
user.save
user.name #=> 'godzilla'
GOTCHA'S
-
The custom code is run after any options are applied. So, as in the example above, even through the option was to
:downcase
the custom block returned a capitalized string. -
The custom code MUST be idempotent. The sanitation is run each time an attribute is set or the model is updated. In the example above, the sanitizer is run both on assigning the value and on saving the record.
Contributing
- Security issues
- Reporting issues
- Pull requests
In all cases please respect our Contributor Code of Conduct.
Security issues
If you have found a security related issue, please follow our Security Policy.
Reporting issues
Please try to answer the following questions in your bug report:
- What did you do?
- What did you expect to happen?
- What happened instead?
Make sure to include as much relevant information as possible, including:
- Ruby version.
- Sanitized version.
- ActiveModel version.
- ActiveRecord version.
- OS version.
- The steps needed to replicate the issue.
- Any stack traces you have are very valuable.
Pull Requests
We encourage contributions via GitHub pull requests.
Our Developer Guide details how to fork the project; get it running locally; run the tests; ensure 100% coverage; check the documentation; check your style; and submit a pull request.
Code of Conduct
We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
Read the full details in our Contributor Code of Conduct.
License
The MIT License (MIT)
Copyright (c) 2021 CodeMeister
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.