mirrors/htmlpurifier
0
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2024-12-22 08:21:52 +00:00
Code Releases Activity
1,650 Commits 7 Branches 66 Tags 9.5 MiB
214cb8a693
Commit Graph

982 Commits

Author SHA1 Message Date
Marcus Artner
214cb8a693
Fixed Issue #264: <thead> element removed from <table> if there are no <tbody> or <tr> elements (#283) 2021-01-26 11:11:50 -05:00
Jasper Zonneveld
2512f595e0
Check PHP version before checking magic quotes (#273) 
This function has been DEPRECATED as of PHP 7.4.0. Relying on this function is highly discouraged. It is basically useless as of PHP 5.4 because it will always return false, so for modern applications it can be safely removed. But as this library still supports PHP 5.2 — according to the constraints in composer.json — I added a version check to prevent this method from being called (and trigger a notice) on PHP >=7.4.

See: https://www.php.net/manual/en/function.get-magic-quotes-gpc.php
 2020-09-30 20:19:10 -04:00
kishor
6aa4166b7e
Issue-256: Fix PHP 7.3 compatibility issues update zend.ze1_compatibility_mode mode (#267) 2020-09-15 20:12:43 -04:00
kishor
4285590c90
issue-256: Fix PHP 7.3 compatibility issues (#266) 2020-09-15 12:38:39 -04:00
Edward Z. Yang
08e27c97e4 Release 4.13.0 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
 2020-06-28 20:56:53 -04:00
Edward Z. Yang
ce7efc11b2 Delete language tests that are interfering with PSR-0 compatibility 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
 2020-06-28 20:38:16 -04:00
Mateusz Turcza
3bdc031224
Add %HTML.Forms config directive (#260) 
The %HTML.Forms directive enables Forms module regardless of the %HTML.Trusted
value. This adds support for form elements without enabling other unsafe
modules, such as Scripts, Iframe or Object.

To achieve the same effect without this directive one has to explicitly list
all enabled modules in %HTML.AllowedModules, and any not listed will be
removed. This however is not very convenient, as the allowed modules may vary
between doctypes.

Resolves #213.
 2020-06-28 20:26:33 -04:00
Fräntz Miccoli
ced089434d
Make purifyArray work with empty array (#245) 2020-02-22 12:12:02 -05:00
Kieran
c2c91f52d0
Added tr@bgcolor to tidy (#244) 2020-02-22 12:10:30 -05:00
Eloy Lafuente
37dd61c45f Correct implode() params for php74 compliance (#243) 
Passing parameters to implode() in reverse order is deprecated, use
implode($glue, $parts) instead of implode($parts, $glue).

Part of https://tracker.moodle.org/browse/MDL-67115
 2020-01-21 11:17:18 -05:00
Anders Jenbo
fe0452d688 Correct typehinting of maybeGet* (#240) 
getDefinition can return null, this wasn't properly hinted leaning to false error detections with static analyzers
 2019-12-04 10:29:08 -05:00
lubomirbartos
df923d1f15 Issue 238 remove leading zeroes except if there is only zero (#239) 
* Issue 238 remove leading zeroes except if there is only zero

* Issue-238 unit test fixes
 2019-11-21 10:05:07 -05:00
Edward Z. Yang
a617e55bc6 Release 4.12.0 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
 2019-10-27 23:44:26 -04:00
Edward Z. Yang
b4ec8c8036 Merge remote-tracking branch 'ezyang/master' 2019-10-27 23:40:25 -04:00
Mateusz Turcza
06b3fc4cf4 Fix phpdoc params in HTMLModule::addElement() and Bool attr (#233) 2019-10-25 10:07:38 -04:00
Mateusz Turcza
ab2887e423 Fix DOM Lexer for PHP versions older than 5.4 (#225) 2019-08-09 17:01:13 -04:00
Edi Modrić
b88fcd180c Replace curly braces with square brackets in string offsets (#224) 2019-07-30 22:50:43 -04:00
Edward Z. Yang
83ab08bc1a Release 4.11.0 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
 2019-07-14 14:58:38 -04:00
Sandro Miguel Marques
b91833877a Method purifyArray() updated (#143) 
* Methof purifyArray() updated

Now it works with multidimensional arrays

* Add test case.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
 2019-07-14 14:10:33 -04:00
Michael Kliewe
7cfc44654a CSS: added "initial" and "inherit" to width + height (#144) 
* CSS: added "initial" and "inherit" to width + height
CSS: added "initial" and "inherit" to min-width + min-height, removed "auto"
CSS: added "initial" and "inherit" and "none" to max-width + max-height, removed "auto"

* Fixed test: min-width:auto; should be false
 2019-07-14 13:20:58 -04:00
msuzuki
8c153eef3a Supported hundreds of nested HTML (#202) 
* Supported hundreds of nested HTML (#201)

* Add Core.AllowParseManyTags
 2019-07-14 13:15:31 -04:00
DiLong Fa
524cd08a59 Update Config.php (#211) 
Fixed Undefined index: class
 2019-07-14 13:11:34 -04:00
Lukas Neumann
5a90c92d83 Adds PHP 7.3 to Travis (#214) 
* Adds PHP 7.3 to Travis

* Fix tests for PHP 7.3
 2019-07-14 13:10:24 -04:00
Darko Hrgovic
f03e1a2c48 Fixed reserved words in constants for PHP 7 as per https://www.php.net/manual/en/reserved.other-reserved-words.php (#222) 2019-07-10 22:24:27 -04:00
Edward Z. Yang
a93250f251 Don't use @ warning suppression. 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2018-11-11 18:20:33 -05:00
Edward Z. Yang
21e32042e9 Update schema for case-sensitive safe scripting 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2018-11-11 16:54:33 -05:00
Chris Pelzer
ab7bbefe8a Update reference to the valid types to refer to HTMLPurifier_VarParser::types (#189) 2018-11-11 16:23:01 -05:00
Edward Z. Yang
0f7b138aaf Make SafeScripting case-sensitive. 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2018-11-11 16:21:58 -05:00
Edward Z. Yang
4b6b3b31e8 Typofix: AutoForamt -> AutoFormat 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2018-11-11 16:21:58 -05:00
Dimitri Gritsajuk
5a01e6535d [SafeScripting] disable autoclosing of <script /> tag (#198) 2018-11-11 15:04:11 -05:00
Daijobou
b81690c17e More colors names (#176) 
Added more colors names https://www.w3schools.com/colors/colors_names.asp

remove old unorded colors names
 2018-06-09 22:48:13 -04:00
Mateusz Turcza
89b3fe431e Use IDNA constants only if defined (#171) 
Fixes #168.

Solution based on https://git.ispconfig.org/ispconfig/ispconfig3/commit/0e3cf6f51b4fd.
 2018-03-04 19:16:11 -05:00
Mateusz Turcza
3cb77da11d Make tagName and node data detection hhvm compatible (#170) 2018-03-04 13:22:03 -05:00
Edward Z. Yang
d85d39da45 Release 4.10.0 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2018-02-22 20:58:20 -05:00
John Flatness
6d6d88512a Skip counting currentNesting if null 
This is an error starting in PHP 7.2
 2017-12-30 00:23:44 -05:00
John Flatness
bb7ad66526 Quarantine __autoload defs for PHP 7.2 compat 2017-12-30 00:23:05 -05:00
Edward Z. Yang
64baeda65c Deal with old libxml incompatibilities. 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2017-12-22 22:03:02 -05:00
Jan Dageförde
67c3798922 Add relative length units from CSS 3 
cf. https://www.w3schools.com/cssref/css_units.asp
 2017-12-22 21:59:47 -05:00
Roberto
ab9c9f30fd Small typos in comments 2017-12-13 11:16:39 -05:00
Marina Glancy
ce0ede24de Use IDNA2008 for converting domains to ASCII 2017-10-03 11:19:50 -04:00
pawelkania
e11f7c9802 Fix E_WARNING when cache directory exists 
Sometimes Serializer from another thread already creaded dir - this commit resolves this issue.
 2017-06-20 09:53:14 +02:00
Edward Z. Yang
95e1bae318 Release 4.9.3 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2017-06-02 22:28:16 -04:00
Xiphin
1df505296f Mod: using stdClass instead of stdclass 2017-06-02 09:55:46 +08:00
Xiphin
b9bc1039da Mod: using null instead of false 2017-06-02 08:50:38 +08:00
Xiphin
cb4871f446 Fix: It runs on PHP 7.1.* CPU process is 100% 2017-06-01 21:32:25 +08:00
Viktor Khokhryakov
b45c6f5363 Autoloading must be skipped while checking for php builtin class. 2017-03-20 10:42:28 +04:00
Edward Z. Yang
6d50e5282a Release 4.9.2 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2017-03-12 23:30:53 -07:00
Edward Z. Yang
5bc7c72608 Add tests for new entity decoding codepath. 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2017-03-12 20:05:09 -07:00
Eugene Leonovich
fd24de69a3 Fix a call to undefined function HTMLPurifier_Encoder() 2017-03-12 22:44:03 +01:00
Edward Z. Yang
5688656174 Fix more PHP 5.3 problems. 
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu>
 2017-03-08 18:01:58 -08:00