mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2025-01-03 05:11:52 +00:00
Release 3.2.0.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com>
This commit is contained in:
parent
3fd51d527c
commit
280211f70b
2
Doxyfile
2
Doxyfile
@ -31,7 +31,7 @@ PROJECT_NAME = HTMLPurifier
|
|||||||
# This could be handy for archiving the generated documentation or
|
# This could be handy for archiving the generated documentation or
|
||||||
# if some version control system is used.
|
# if some version control system is used.
|
||||||
|
|
||||||
PROJECT_NUMBER = 3.1.1
|
PROJECT_NUMBER = 3.2.0
|
||||||
|
|
||||||
# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
|
# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
|
||||||
# base path where the generated documentation will be put.
|
# base path where the generated documentation will be put.
|
||||||
|
2
FOCUS
2
FOCUS
@ -1,4 +1,4 @@
|
|||||||
9 - Major security fixes
|
5 - Major feature enhancements
|
||||||
|
|
||||||
[ Appendix A: Release focus IDs ]
|
[ Appendix A: Release focus IDs ]
|
||||||
0 - N/A
|
0 - N/A
|
||||||
|
2
NEWS
2
NEWS
@ -9,7 +9,7 @@ NEWS ( CHANGELOG and HISTORY ) HTMLPurifier
|
|||||||
. Internal change
|
. Internal change
|
||||||
==========================
|
==========================
|
||||||
|
|
||||||
3.2.0, unknown release date
|
3.2.0, released 2008-10-31
|
||||||
# Using %Core.CollectErrors forces line number/column tracking on, whereas
|
# Using %Core.CollectErrors forces line number/column tracking on, whereas
|
||||||
previously you could theoretically turn it off.
|
previously you could theoretically turn it off.
|
||||||
# HTMLPurifier_Injector->notifyEnd() is formally deprecated. Please
|
# HTMLPurifier_Injector->notifyEnd() is formally deprecated. Please
|
||||||
|
6
TODO
6
TODO
@ -20,7 +20,7 @@ afraid to cast your vote for the next feature to be implemented!
|
|||||||
FUTURE VERSIONS
|
FUTURE VERSIONS
|
||||||
---------------
|
---------------
|
||||||
|
|
||||||
3.2 release [It's All About Trust] (floating)
|
3.3 release [It's All About Trust] (floating)
|
||||||
# Implement untrusted, dangerous elements/attributes
|
# Implement untrusted, dangerous elements/attributes
|
||||||
# Implement IDREF support (harder than it seems, since you cannot have
|
# Implement IDREF support (harder than it seems, since you cannot have
|
||||||
IDREFs to non-existent IDs)
|
IDREFs to non-existent IDs)
|
||||||
@ -28,11 +28,11 @@ FUTURE VERSIONS
|
|||||||
- Implement <area>
|
- Implement <area>
|
||||||
- Figure out how to simultaneously set %CSS.Trusted and %HTML.Trusted (?)
|
- Figure out how to simultaneously set %CSS.Trusted and %HTML.Trusted (?)
|
||||||
|
|
||||||
3.3 release [Error'ed]
|
3.4 release [Error'ed]
|
||||||
# Error logging for filtering/cleanup procedures
|
# Error logging for filtering/cleanup procedures
|
||||||
- XSS-attempt detection--certain errors are flagged XSS-like
|
- XSS-attempt detection--certain errors are flagged XSS-like
|
||||||
|
|
||||||
3.4 release [Do What I Mean, Not What I Say]
|
3.5 release [Do What I Mean, Not What I Say]
|
||||||
# Additional support for poorly written HTML
|
# Additional support for poorly written HTML
|
||||||
- Microsoft Word HTML cleaning (i.e. MsoNormal, but research essential!)
|
- Microsoft Word HTML cleaning (i.e. MsoNormal, but research essential!)
|
||||||
- Friendly strict handling of <address> (block -> <br>)
|
- Friendly strict handling of <address> (block -> <br>)
|
||||||
|
14
WHATSNEW
14
WHATSNEW
@ -1,8 +1,6 @@
|
|||||||
HTML Purifier 3.1.1 is a security and bugfix release. This release addresses
|
HTML Purifier 3.2.0 is an amalgamation of new features and fixes that
|
||||||
two security vulnerabilities, both related to CSS, and one of which only
|
have accumulated over a four month period. Some notable features
|
||||||
applies to users using Shift_JIS as their output encoding. There is also
|
include %AutoFormat.RemoveEmpty, column tracking for tokens,
|
||||||
a security improvement regarding the imagecrash attack. There is a backwards
|
%AutoFormat.DisplayLinkURI and %Attr.DefaultImageAlt. There were also
|
||||||
incompatible change in which resources are no longer munged
|
major improvements to the test suite interface, error collection output
|
||||||
by default; please enable using %URI.MungeResources. Besides this, there
|
and the auto-formatter framework.
|
||||||
are numerous improvements to URI munging, esp. with the addition of
|
|
||||||
%URI.MungeSecretKey, as well as an experimental %HTML.SafeObject and %HTML.SafeEmbed.
|
|
||||||
|
@ -7,7 +7,7 @@
|
|||||||
* primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS
|
* primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS
|
||||||
* FILE, changes will be overwritten the next time the script is run.
|
* FILE, changes will be overwritten the next time the script is run.
|
||||||
*
|
*
|
||||||
* @version 3.1.1
|
* @version 3.2.0
|
||||||
*
|
*
|
||||||
* @warning
|
* @warning
|
||||||
* You must *not* include any other HTML Purifier files before this file,
|
* You must *not* include any other HTML Purifier files before this file,
|
||||||
|
@ -19,7 +19,7 @@
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
/*
|
/*
|
||||||
HTML Purifier 3.1.1 - Standards Compliant HTML Filtering
|
HTML Purifier 3.2.0 - Standards Compliant HTML Filtering
|
||||||
Copyright (C) 2006-2008 Edward Z. Yang
|
Copyright (C) 2006-2008 Edward Z. Yang
|
||||||
|
|
||||||
This library is free software; you can redistribute it and/or
|
This library is free software; you can redistribute it and/or
|
||||||
@ -55,10 +55,10 @@ class HTMLPurifier
|
|||||||
{
|
{
|
||||||
|
|
||||||
/** Version of HTML Purifier */
|
/** Version of HTML Purifier */
|
||||||
public $version = '3.1.1';
|
public $version = '3.2.0';
|
||||||
|
|
||||||
/** Constant with version of HTML Purifier */
|
/** Constant with version of HTML Purifier */
|
||||||
const VERSION = '3.1.1';
|
const VERSION = '3.2.0';
|
||||||
|
|
||||||
/** Global configuration object */
|
/** Global configuration object */
|
||||||
public $config;
|
public $config;
|
||||||
|
@ -20,7 +20,7 @@ class HTMLPurifier_Config
|
|||||||
/**
|
/**
|
||||||
* HTML Purifier's version
|
* HTML Purifier's version
|
||||||
*/
|
*/
|
||||||
public $version = '3.1.1';
|
public $version = '3.2.0';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Bool indicator whether or not to automatically finalize
|
* Bool indicator whether or not to automatically finalize
|
||||||
|
@ -104,5 +104,5 @@ file_put_contents('library/HTMLPurifier/Config.php', $config_c);
|
|||||||
|
|
||||||
passthru('php maintenance/flush.php');
|
passthru('php maintenance/flush.php');
|
||||||
|
|
||||||
if ($is_dev) echo "Review changes, write something in WHATSNEW and FOCUS, and then SVN commit with log 'Release $version.'" . PHP_EOL;
|
if ($is_dev) echo "Review changes, write something in WHATSNEW and FOCUS, and then commit with log 'Release $version.'" . PHP_EOL;
|
||||||
else echo "Numbers updated to dev, no other modifications necessary!";
|
else echo "Numbers updated to dev, no other modifications necessary!";
|
||||||
|
Loading…
Reference in New Issue
Block a user