lib/safemode/jail.rb in safemode-1.3.5 vs lib/safemode/jail.rb in safemode-1.3.6

- old
+ new

@@ -1,40 +1,35 @@ -module Safemode - class Jail < Blankslate +module Safemode + class Jail < Blankslate def initialize(source = nil) @source = source end - + def to_jail self end - + def to_s @source.to_s end - + def method_missing(method, *args, &block) if @source.is_a?(Class) unless self.class.allowed_class_method?(method) raise Safemode::NoMethodError.new(".#{method}", self.class.name, @source.name) end else unless self.class.allowed_instance_method?(method) raise Safemode::NoMethodError.new("##{method}", self.class.name, @source.class.name) end end - + # As every call to an object in the eval'ed string will be jailed by the # parser we don't need to "proactively" jail arrays and hashes. Likewise we # don't need to jail objects returned from a jail. Doing so would provide # "double" protection, but it also would break using a return value in an if # statement, passing them to a Rails helper etc. @source.send(method, *args, &block) - end - - # needed for compatibility with 1.8.7; remove this method once 1.8.7 support has been dropped - def respond_to?(method, *) - respond_to_missing?(method) end def respond_to_missing?(method_name, include_private = false) self.class.allowed_instance_method?(method_name) end