data-method with params

Author: KODerFunk

src/rails.js

@@ -173,18 +173,43 @@
       var href = rails.href(link),
         method = link.data('method'),
         target = link.attr('target'),
+        params = link.data('params'),
         csrfToken = $('meta[name=csrf-token]').attr('content'),
         csrfParam = $('meta[name=csrf-param]').attr('content'),
         form = $('<form method="post" action="' + href + '"></form>'),
-        metadataInput = '<input name="_method" value="' + method + '" type="hidden" />';
+        dataInputs = '<input name="_method" value="' + method + '" type="hidden" />';
 
       if (csrfParam !== undefined && csrfToken !== undefined) {
-        metadataInput += '<input name="' + csrfParam + '" value="' + csrfToken + '" type="hidden" />';
+        dataInputs += '<input name="' + csrfParam + '" value="' + csrfToken + '" type="hidden" />';
+      }
+
+      if (params) {
+
+        function buildParamsInputs(key, value) {
+          switch (typeof value) {
+            case 'array':
+              var result = [];
+              for (var i = 0, l = value.length; i < l; i++) {
+                result.push( buildParamsInputs(key === null ? i : key + '[' + i + ']', value[i]) );
+              }
+              return result.join('');
+            case 'object':
+              var result = [];
+              for (var i in value) {
+                result.push( buildParamsInputs(key === null ? i : key + '[' + i + ']', value[i]) );
+              }
+              return result.join('');
+            default:
+              return '<input name="' + key + '" value="' + String(value).replace(/"/g, '&quot;') + '" type="hidden" />';
+          }
+        }
+
+        dataInputs += buildParamsInputs(null, params);
       }
 
       if (target) { form.attr('target', target); }
 
-      form.hide().append(metadataInput).appendTo('body');
+      form.hide().append(dataInputs).appendTo('body');
       form.submit();
     },
 

test/public/test/data-method.js

@@ -29,6 +29,31 @@ asyncTest('link with "data-method" set to "delete"', 3, function() {
   });
 });
 
+var escapeMap = {
+  '<': '&lt;',
+  '>': '&gt;'
+};
+function escapeReplacer (entity) { return escapeMap[entity] || entity; }
+function escapeHTML(str) { return String(str).replace(/<|>/g, escapeReplacer); }
+
+asyncTest('link with "data-method" set to "post" and "data-params"', 4, function() {
+  var value1 = 0,
+    value2 = '\'quoted"/>&<\'value"',
+    value3 = {foo: {bar: {baz: value2}}},
+    params = {
+      data1: value1,
+      data2: value2,
+      data3: value3
+    };
+  $('a[data-method]').attr({'data-method': 'post', 'data-params': JSON.stringify(params)});
+  submit(function(data) {
+    equal(data.REQUEST_METHOD, 'POST');
+    equal(data.params.data1, escapeHTML(value1), 'params should have key data1 with right value');
+    equal(data.params.data2, escapeHTML(value2), 'params should have key data2 with right value');
+    propEqual(data.params.data3, {foo: {bar: {baz: escapeHTML(value2)}}}, 'params should have key data3 with right value');
+  });
+});
+
 asyncTest('link with "data-method" and CSRF', 1, function() {
   $('#qunit-fixture')
     .append('<meta name="csrf-param" content="authenticity_token"/>')