
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
truncato is a Ruby library for truncating HTML strings keeping the markup valid.
In your Gemfile
gem 'truncato'
Truncato.truncate "<p>some text</p>", max_length: 4 #=> "<p>s...</p>"
Truncato.truncate "<p>some text</p>", max_length: 4, count_tags: false #=> "<p>some...</p>"
The configuration options are:
max_length
: The size, in characters, to truncate (30
by default)filtered_attributes
: Array of attribute names that will be removed in the truncated string. This allows you to make the truncated string shorter by excluding the content of attributes you can discard in some given context, e.g HTML style
attribute.filtered_tags
: Array of tags that will be removed in the truncated string. If a tag is excluded, all the nested tags under it will be excluded too.count_tags
: Boolean value indicating whether tags size should be considered when truncating (true
by default)tail_before_final_tag
: Boolean value indicating whether to apply a tail before the final closing tag (false
by default)comments
: Boolean value indicating whether to include comments in parsed results (false
by default)tail
: The string to append when the truncation occurs ('...' by default)count_tail
: Boolean value indicating whether to include the tail within the bounds of the provided max length (false
by default)Truncato was designed with performance in mind. Its main motivation was that existing libs couldn't truncate a multiple-MB document into a few-KB one in a reasonable time. It uses the Nokogiri SAX parser.
There is a benchmark included that generates a synthetic XML of 4MB and truncates it to 400 KB. You can run the benchmark using
rake truncato:benchmark
There is a also a comparison benchmark that tests the previous data with other alternatives
rake truncato:vendor_compare
The results comparing truncato with other libs:
Truncato | truncate_html | HTML Truncator | peppercorn | |
---|---|---|---|---|
Time for truncating a 4MB XML document to 4KB | 1.5 s | 20 s | 220 s | 232 s |
rake spec
FAQs
Unknown package
We found that truncato demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.