2.1.5 preparation

HISTORY.txt

@@ -1,5 +1,14 @@
 Minify Release History
 
+Version 2.1.5
+    * Removed XSS vulnerability
+    * Disabled builder bby default
+    * command line tools to minify and rewrite URIs in CSS
+    * upgrade (optional) JSMin+ library
+    * more efficient JS minification when using CC/YUIC
+    * Closure Compiler uses cURL when allow_url_fopen is off
+    * Missing file notices when using groups
+
 Version 2.1.4
     * Option to minify JS with Closure Compiler API w/ JSMin failover
     * Cookie/bookmarklet-based debug mode. No HTML editing!

min/builder/_index.js

@@ -214,10 +214,19 @@ var MUB = {
         if (location.hash) {
             // make links out of URIs from bookmarklet
             $('#getBm').hide();
-            $('#bmUris').html('<p><strong>Found by bookmarklet:</strong> /<a href=#>' +
-                 location.hash.substr(1).split(',').join('</a> | /<a href=#>') +
-                 '</a></p>'
-            );
+            var i = 0, found = location.hash.substr(1).split(','), l = found.length;
+            $('#bmUris').html('<p><strong>Found by bookmarklet:</strong> /</p>');
+            var $p = $('#bmUris p');
+            for (; i < l; i++) {
+                $p.append($('<a href=#></a>').text(found[i])[0]);
+                if (i < (l - 1)) {
+                    $p.append(', /');
+                }
+            }
+//            $('#bmUris').html('<p><strong>Found by bookmarklet:</strong> /<a href=#>' +
+//                 location.hash.substr(1).split(',').join('</a> | /<a href=#>') +
+//                 '</a></p>'
+//            );
             $('#bmUris a').click(function () {
                 MUB.addButtonClick();
                 $('#sources li:last input').val(this.innerHTML);

min/config.php

@@ -34,10 +34,9 @@ $min_allowDebugFlag = false;
 
 
 /**
- * Allow use of the Minify URI Builder app. If you no longer need 
- * this, set to false.
+ * Allow use of the Minify URI Builder app. Only set this to true while you need it.
  **/
-$min_enableBuilder = true;
+$min_enableBuilder = false;
 
 
 /**

min/lib/Minify.php

@@ -29,7 +29,7 @@ require_once 'Minify/Source.php';
  */
 class Minify {
     
-    const VERSION = '2.1.4';
+    const VERSION = '2.1.5';
     const TYPE_CSS = 'text/css';
     const TYPE_HTML = 'text/html';
     // there is some debate over the ideal JS Content-Type, but this is the