mirror/php-htmlpurifier
1
0
Fork 0
mirror of https://github.com/ezyang/htmlpurifier.git synced 2025-08-06 14:16:32 +02:00
Code Issues Releases Wiki Activity

Release 4.4.0

Browse Source 
Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
This commit is contained in:
Edward Z. Yang
2012-01-18 19:22:27 -05:00
parent 70028f83d6
commit 17af0e4fc1
9 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
WHATSNEW
View File

@@ -1,8 +1,8 @@
HTML Purifier 4.3.0 is a major security release addressing various
security vulnerabilities related to user-submitted code and legitimate
client-side scripts. It also contains an accumulation of new features
and bugfixes over half a year. New configuration options include
%CSS.Trusted, %CSS.AllowedFonts and %Cache.SerializerPermissions.
There is a backwards-incompatible API change for customized raw
definitions, see <http://htmlpurifier.org/docs/enduser-customize.html#optimized>
for details.
HTML Purifier 4.4.0 is a minor security release addressing a security
vulnerability associated with some optional functionality. It also
contains an accumulation of new features and bugfixes over half a year.
New configuration options include %HTML.TargetBlank,
%HTML.AllowedComments, %HTML.AllowedCommentsRegexp, %HTML.SafeIframe,
%URI.SafeIframeRegexp, %Core.EnableIDNA (requires PEAR Net_IDNA2 module and
doesn't work for PHP 5.0.5). We also now support the 'scope' attribute on
tables.