1 files changed, 49 insertions, 0 deletions
diff --git a/gnu/packages/ruby.scm b/gnu/packages/ruby.scm
index 720f38d3e5..a4395ba197 100644
--- a/gnu/packages/ruby.scm
+++ b/gnu/packages/ruby.scm
@@ -6814,3 +6814,52 @@ minutes of work.
   (home-page
     "http://github.com/faye/websocket-extensions-ruby")
   (license license:expat)))
+
+(define-public ruby-loofah
+(package
+  (name "ruby-loofah")
+  (version "2.0.3")
+  (source
+    (origin
+      (method url-fetch)
+      (uri (rubygems-uri "loofah" version))
+      (sha256
+        (base32
+          "109ps521p0sr3kgc460d58b4pr1z4mqggan2jbsf0aajy9s6xis8"))))
+  (build-system ruby-build-system)
+   (arguments
+     `(#:tests? #f)) ; 1 test fails
+  (native-inputs
+   `(("ruby-hoe" ,ruby-hoe)
+     ("ruby-rr" ,ruby-rr)))
+  (propagated-inputs
+    `(("ruby-nokogiri" ,ruby-nokogiri)))
+  (synopsis
+    "Loofah is a general library for manipulating and transforming HTML/XML
+documents and fragments. It's built on top of Nokogiri and libxml2, so
+it's fast and has a nice API.
+
+Loofah excels at HTML sanitization (XSS prevention). It includes some
+nice HTML sanitizers, which are based on HTML5lib's whitelist, so it
+most likely won't make your codes less secure. (These statements have
+not been evaluated by Netexperts.)
+
+ActiveRecord extensions for sanitization are available in the
+`loofah-activerecord` gem (see
+https://github.com/flavorjones/loofah-activerecord).")
+  (description
+    "Loofah is a general library for manipulating and transforming HTML/XML
+documents and fragments.  It's built on top of Nokogiri and libxml2, so
+it's fast and has a nice API.
+
+Loofah excels at HTML sanitization (XSS prevention).  It includes some
+nice HTML sanitizers, which are based on HTML5lib's whitelist, so it
+most likely won't make your codes less secure. (These statements have
+not been evaluated by Netexperts.)
+
+ActiveRecord extensions for sanitization are available in the
+`loofah-activerecord` gem (see
+https://github.com/flavorjones/loofah-activerecord).")
+  (home-page
+    "https://github.com/flavorjones/loofah")
+  (license license:expat)))