0
0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-01-03 05:11:52 +00:00

Release 4.2.0.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
This commit is contained in:
Edward Z. Yang 2010-09-15 02:52:57 -04:00
parent 86990a21f1
commit 882ffed9ba
8 changed files with 17 additions and 14 deletions

View File

@ -31,7 +31,7 @@ PROJECT_NAME = HTMLPurifier
# This could be handy for archiving the generated documentation or # This could be handy for archiving the generated documentation or
# if some version control system is used. # if some version control system is used.
PROJECT_NUMBER = 4.1.1 PROJECT_NUMBER = 4.2.0
# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute) # The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
# base path where the generated documentation will be put. # base path where the generated documentation will be put.

2
FOCUS
View File

@ -1,4 +1,4 @@
9 - Major security fixes 4 - Minor feature enhancements
[ Appendix A: Release focus IDs ] [ Appendix A: Release focus IDs ]
0 - N/A 0 - N/A

2
NEWS
View File

@ -9,7 +9,7 @@ NEWS ( CHANGELOG and HISTORY ) HTMLPurifier
. Internal change . Internal change
========================== ==========================
4.2.0, unknown release date 4.2.0, released 2010-09-15
! Added %Core.RemoveProcessingInstructions, which lets you remove ! Added %Core.RemoveProcessingInstructions, which lets you remove
<? ... ?> statements. <? ... ?> statements.
! Added %URI.DisableResources functionality; the directive originally ! Added %URI.DisableResources functionality; the directive originally

View File

@ -1 +1 @@
4.1.1 4.2.0

View File

@ -1,5 +1,8 @@
HTML Purifier 4.1.1 is a major security and bugfix release that HTML Purifier 4.2.0 is a minor release that implements a number of
improves on 4.1's fix for an XSS vulnerability exploitable on Internet feature requests accumulated over half a year. New configuration
Explorer. It also contains a number of important bugfixes, including options include %Core.RemoveProcessingInstructions,
the removal of improper logic that could result in infinite loops and %CSS.ForbiddenProperties, %HTML.FlashAllowFullScreen and
fixed parsing for single-attributes with entities with DirectLex. %Core.NormalizeNewlines. Additionally,%URI.DisableResources is
now functional and file: is an optionally supported URI scheme.
There are also some minor bugfixes, usability improvements and
documentation updates.

View File

@ -7,7 +7,7 @@
* primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS * primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS
* FILE, changes will be overwritten the next time the script is run. * FILE, changes will be overwritten the next time the script is run.
* *
* @version 4.1.1 * @version 4.2.0
* *
* @warning * @warning
* You must *not* include any other HTML Purifier files before this file, * You must *not* include any other HTML Purifier files before this file,

View File

@ -19,7 +19,7 @@
*/ */
/* /*
HTML Purifier 4.1.1 - Standards Compliant HTML Filtering HTML Purifier 4.2.0 - Standards Compliant HTML Filtering
Copyright (C) 2006-2008 Edward Z. Yang Copyright (C) 2006-2008 Edward Z. Yang
This library is free software; you can redistribute it and/or This library is free software; you can redistribute it and/or
@ -55,10 +55,10 @@ class HTMLPurifier
{ {
/** Version of HTML Purifier */ /** Version of HTML Purifier */
public $version = '4.1.1'; public $version = '4.2.0';
/** Constant with version of HTML Purifier */ /** Constant with version of HTML Purifier */
const VERSION = '4.1.1'; const VERSION = '4.2.0';
/** Global configuration object */ /** Global configuration object */
public $config; public $config;

View File

@ -20,7 +20,7 @@ class HTMLPurifier_Config
/** /**
* HTML Purifier's version * HTML Purifier's version
*/ */
public $version = '4.1.1'; public $version = '4.2.0';
/** /**
* Bool indicator whether or not to automatically finalize * Bool indicator whether or not to automatically finalize