0
0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-01-03 05:11:52 +00:00

Release 4.6.0.

Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
This commit is contained in:
Edward Z. Yang 2013-11-30 00:25:19 -08:00
parent 8cd08620dc
commit 6f389f0f25
8 changed files with 14 additions and 15 deletions

View File

@ -31,7 +31,7 @@ PROJECT_NAME = HTMLPurifier
# This could be handy for archiving the generated documentation or # This could be handy for archiving the generated documentation or
# if some version control system is used. # if some version control system is used.
PROJECT_NUMBER = 4.5.0 PROJECT_NUMBER = 4.6.0
# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute) # The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
# base path where the generated documentation will be put. # base path where the generated documentation will be put.

2
FOCUS
View File

@ -1,4 +1,4 @@
4 - Minor feature enhancements 9 - Major security fixes
[ Appendix A: Release focus IDs ] [ Appendix A: Release focus IDs ]
0 - N/A 0 - N/A

2
NEWS
View File

@ -9,7 +9,7 @@ NEWS ( CHANGELOG and HISTORY ) HTMLPurifier
. Internal change . Internal change
========================== ==========================
4.6.0, unknown release date 4.6.0, released 2013-11-30
# Secure URI munge hashing algorithm has changed to hash_hmac("sha256", $url, $secret). # Secure URI munge hashing algorithm has changed to hash_hmac("sha256", $url, $secret).
Please update any verification scripts you may have. Please update any verification scripts you may have.
# URI parsing algorithm was made more strict, so only prefixes which # URI parsing algorithm was made more strict, so only prefixes which

View File

@ -1 +1 @@
4.5.0 4.6.0

View File

@ -1,6 +1,5 @@
HTML Purifier 4.5.0 is a minor bugfix and feature release, containing an HTML Purifier 4.6.0 is a major security release, fixing numerous bad
accumulation of changes over a year. CSS support has been extended to quadratic asymptotics in HTML Purifier's core algorithms. Most users will
support display:inline-block, white-space, underscores in font families, see a decent speedup on large inputs, although small inputs may take
page-break-* CSS3 properties (when proprietary is enabled.) We now use longer. Additionally, the secure URI munging algorithm has changed to
SHA-1 to identify cached definitions, and the semantics of stacked do a proper HMAC. There are some other miscellaneous bugfixes as well.
attribute transforms has changed slightly.

View File

@ -7,7 +7,7 @@
* primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS * primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS
* FILE, changes will be overwritten the next time the script is run. * FILE, changes will be overwritten the next time the script is run.
* *
* @version 4.5.0 * @version 4.6.0
* *
* @warning * @warning
* You must *not* include any other HTML Purifier files before this file, * You must *not* include any other HTML Purifier files before this file,

View File

@ -19,7 +19,7 @@
*/ */
/* /*
HTML Purifier 4.5.0 - Standards Compliant HTML Filtering HTML Purifier 4.6.0 - Standards Compliant HTML Filtering
Copyright (C) 2006-2008 Edward Z. Yang Copyright (C) 2006-2008 Edward Z. Yang
This library is free software; you can redistribute it and/or This library is free software; you can redistribute it and/or
@ -58,12 +58,12 @@ class HTMLPurifier
* Version of HTML Purifier. * Version of HTML Purifier.
* @type string * @type string
*/ */
public $version = '4.5.0'; public $version = '4.6.0';
/** /**
* Constant with version of HTML Purifier. * Constant with version of HTML Purifier.
*/ */
const VERSION = '4.5.0'; const VERSION = '4.6.0';
/** /**
* Global configuration object. * Global configuration object.

View File

@ -21,7 +21,7 @@ class HTMLPurifier_Config
* HTML Purifier's version * HTML Purifier's version
* @type string * @type string
*/ */
public $version = '4.5.0'; public $version = '4.6.0';
/** /**
* Whether or not to automatically finalize * Whether or not to automatically finalize