Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
FilterableModel provides an organized and seamless way to filter your ActiveRecord objects using real and custom attributes.
Add this line to your application's Gemfile:
gem 'filterable_model', '~> 0.1.0'
And then execute:
$ bundle
Or install it yourself as:
$ gem install filterable_model
Include FilterableModel inside ApplicationRecord or directly inside your ActiveRecord model:
class User < ApplicationRecord
include FilterableModel
end
To filter using the exact values of your ActiveRecord model attributes, override the filterable_attributes
class method to return an array of whitelisted attributes:
class User < ApplicationRecord
include FilterableModel
concerning :Filtering do
class_methods do
def filterable_attributes
%w[id gender is_subscribed]
end
end
end
end
Filtering using custom attributes works by calling the add_filter method and passing a block that accepts the filter-by value, and returns an ActiveRecord::Relation
:
class User < ApplicationRecord
include FilterableModel
concerning :Filtering do
included do
add_filter :name do |name| # search by first name or username
where("LOWER(users.first_name) LIKE :query OR LOWER(users.username) LIKE :query", query: "%#{name.downcase}%")
end
add_filter :just_active do |value| # filter by users with active sessions
if value.to_s == 'true'
includes(:session).where(session: { active: true })
else
current_scope # do not change the current relation
end
end
end
end
end
Filter your relation by calling filter
on your model and passing the filtering hash:
@users = User.all
filtering_hash = {
gender: 'male',
is_subscribed: 'false',
name: 'John',
just_active: 'true'
}
@users = @users.filter(filtering_hash)
Passing an unknown filter will raise a FilterNotSupported
error.
Bug reports and pull requests are welcome on GitHub at https://github.com/umar221b/filterable_model.
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that filterable_model demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.