Contents

module Safemode
  class Jail < Blankslate
    def initialize(source = nil)
      @source = source
    end

    def to_jail
      self
    end

    def to_s
      @source.to_s
    end

    def method_missing(method, *args, **kwargs, &block)
      if @source.is_a?(Class)
        unless self.class.allowed_class_method?(method)
          raise Safemode::NoMethodError.new(".#{method}", self.class.name, @source.name)
        end
      else
        unless self.class.allowed_instance_method?(method)
          raise Safemode::NoMethodError.new("##{method}", self.class.name, @source.class.name)
        end
      end

      # As every call to an object in the eval'ed string will be jailed by the
      # parser we don't need to "proactively" jail arrays and hashes. Likewise we
      # don't need to jail objects returned from a jail. Doing so would provide
      # "double" protection, but it also would break using a return value in an if
      # statement, passing them to a Rails helper etc.
      @source.send(method, *args, **kwargs, &block)
    end

    def respond_to_missing?(method_name, include_private = false)
      self.class.allowed_instance_method?(method_name)
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
safemode-1.5.0	lib/safemode/jail.rb
safemode-1.4.0	lib/safemode/jail.rb