class PuppetForgeServer::App::Frontend

Public Class Methods

new(root, http_client = PuppetForgeServer::Http::HttpClient.new) click to toggle source
Calls superclass method
# File lib/puppet_forge_server/app/frontend.rb, line 35
def initialize(root, http_client = PuppetForgeServer::Http::HttpClient.new)
  super(nil)
  settings.root = root
  @http_client = http_client
end

Private Instance Methods

get(relative_url) click to toggle source
# File lib/puppet_forge_server/app/frontend.rb, line 88
def get(relative_url)
  begin
    JSON.parse(@http_client.get(relative_url))
  rescue
    {'results' => []}
  end
end
safe_input?(query) click to toggle source
# File lib/puppet_forge_server/app/frontend.rb, line 96
def safe_input?(query)
  unsafe_query = CGI::unescape(query)
  %w[< javascript:].none? { |q| unsafe_query.include?(q) }
end