Contents

require 'set'

module Liquid

  parent_object = if defined? BlankObject
    BlankObject
  else
    Object
  end

  # Strainer is the parent class for the filters system.
  # New filters are mixed into the strainer class which is then instanciated for each liquid template render run.
  #
  # One of the strainer's responsibilities is to keep malicious method calls out
  class Strainer < parent_object #:nodoc:
    INTERNAL_METHOD = /^__/
    @@required_methods = Set.new([:__id__, :__send__, :respond_to?, :extend, :methods, :class, :object_id])

    @@filters = {}

    def initialize(context)
      @context = context
    end

    def self.global_filter(filter)
      raise ArgumentError, "Passed filter is not a module" unless filter.is_a?(Module)
      @@filters[filter.name] = filter
    end

    def self.create(context)
      strainer = Strainer.new(context)
      @@filters.each { |k,m| strainer.extend(m) }
      strainer
    end

    def respond_to?(method, include_private = false)
      method_name = method.to_s
      return false if method_name =~ INTERNAL_METHOD
      return false if @@required_methods.include?(method_name)
      super
    end

    # remove all standard methods from the bucket so circumvent security
    # problems
    instance_methods.each do |m|
      unless @@required_methods.include?(m.to_sym)
        undef_method m
      end
    end
  end
end

Version data entries

8 entries across 8 versions & 6 rubygems

Version	Path
jeremyf-liquid-2.0.2	lib/liquid/strainer.rb
tobi-liquid-2.0.1	lib/liquid/strainer.rb
locomotive_liquid-2.1.3	lib/liquid/strainer.rb
liquid-2.1.3	lib/liquid/strainer.rb
liquid-2.1.2	lib/liquid/strainer.rb
liquid-2.1.0	lib/liquid/strainer.rb
agilitic-liquid-2.0.1	lib/liquid/strainer.rb
drnic-liquid-2.1.0	lib/liquid/strainer.rb