diff --git a/TODO b/TODO index 6d5cf64f..aa625d3a 100644 --- a/TODO +++ b/TODO @@ -7,16 +7,14 @@ TODO List ? At-risk ========================== -1.4 release - - Aggressive caching - ? Configuration profiles: sets of directives that get set with one func call - 1.5 release # Implement all non-essential attribute transforms # URI validation routines tighter (see docs/dev-code-quality.html) (COMPLEX) # Advanced URI filtering schemes (see docs/proposal-new-directives.txt) # Error logging for filtering/cleanup procedures - Requires I18N facilities to be created first (COMPLEX) + ? Configuration profiles: sets of directives that get set with one func call + - XSS-attempt detection 1.6 release # Add pre-packaged "levels" of cleaning (custom behavior already done) @@ -25,11 +23,26 @@ TODO List specification of elements that, when detected as foreign, trigger removal of children, although unbalanced tags could wreck havoc (or at least delete the rest of the document)). + - Allow specifying global attributes on a tag-by-tag basis in + %HTML.AllowAttributes + ? More user-friendly warnings when %HTML.Allow* attempts to specify a + tag or attribute that is not supported + - Parse TinyMCE whitelist into our %HTML.Allow* whitelists 1.7 release # Additional support for poorly written HTML - Microsoft Word HTML cleaning (i.e. MsoNormal, but research essential!) - Friendly strict handling of
(block -> or related tags)
? Win32 Phalanger C# binaries
- - Remove redundant tags, ex. Underlined. Implementation notes:
- 1. Analyzing which tags to remove duplicants
- 2. Ensure attributes are merged into the parent tag
- 3. Extend the tag exclusion system to specify whether or not the
- contents should be dropped or not (currently, there's code that could do
- something like this if it didn't drop the inner text too.)
- ? More user-friendly warnings when %HTML.Allow* attempts to specify a
- tag or attribute that is not supported
- - Allow specifying global attributes on a tag-by-tag basis in
- %HTML.AllowAttributes
- - Parse TinyMCE whitelist into our %HTML.Allow* whitelists
- - XSS-attempt detection
- - Remove tags that don't do anything (no attributes)
- - Remove empty inline tags
Wontfix
- Non-lossy smart alternate character encoding transformations (unless