bf84df4f7d
Move opacity to tricky. Fixes #16 .
...
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu >
2014-08-31 09:24:11 +01:00
15d1a3003a
Don't truncate in DOMLex when seeing closing div
...
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu >
2014-08-31 08:50:33 +01:00
80ebd4322e
Typo in docs, thanks Soleil Golden for reporting.
...
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu >
2014-02-04 12:17:24 -08:00
6f389f0f25
Release 4.6.0.
...
Signed-off-by: Edward Z. Yang <ezyang@cs.stanford.edu >
2013-11-30 00:25:19 -08:00
8cd08620dc
Conditionalize hash_hmac tests for 5.0
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-11-29 22:27:01 -08:00
54477c172b
Fix infinite loop in Lexer.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-27 21:41:08 -07:00
e52d1fe310
Fix < PHP 5.4 compatibility break. Thanks GromNaN for submitting the patch.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-22 14:17:41 -07:00
0767bbc12d
Rewrite FixNesting implementation to be tree-based.
...
This mega-patch rips out the FixNesting implementation and the related
ChildDef components. The primary algorithmic change is to convert from
use of tokens to tree nodes, which are far more amenable to the style
of processing that FixNesting uses. Additionally, FixNesting has been
changed to go bottom-up rather than top-down, in order to avoid needing
to implement backtracking.
This patch simplifies a good deal of the relevant logic, since we no
longer need to continually recalculate the nesting structure when
processing things. However, the conversion to the alternate format
incurs some overhead, so for small inputs these changes are not a win.
One possibility to greatly reduce the constant factors here is to switch
to entirely using libxml's representation, and never serializing tokens;
this would require one to rewrite injectors, however.
The iterative post-order traversal in FixNesting is a bit subtle, but
we have essentially reified the stack and continuations.
We've removed support for %Core.EscapeInvalidChildren.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-20 22:37:01 -07:00
b3640e1af6
Add conversion functions for our own tree format.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-20 15:05:11 -07:00
be5769804a
Make the Token class abstract.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-17 16:13:04 -07:00
d6fbd7df22
Remove some unnecessary pass-by-reference.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-16 18:55:23 -07:00
804a06f01e
Remove PHP 4 compatibility hack.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-16 18:36:44 -07:00
8f401f769e
Use a Zipper to process MakeWellFormed, removing quadratic behavior.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-13 13:21:02 -07:00
82bcc62058
Properly handle context variables that are NULL.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-13 13:21:02 -07:00
f17490f009
Implementation of a Zipper, for efficient splice.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-10-13 01:16:32 -07:00
412bae13b5
Fix quadratic behavior in DOMLex due to array_shift.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-09-17 00:48:42 -07:00
cf44f399f8
Properly use HMAC for secure munging.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-09-13 21:16:50 -07:00
fac747bdbd
PSR-2 reformatting PHPDoc corrections
...
With minor corrections.
Signed-off-by: Marcus Bointon <marcus@synchromedia.co.uk >
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-08-17 22:27:26 -04:00
19eee14899
Tighten up invariants.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-07-26 21:54:53 -07:00
25d49f4ec0
Explicitly specify decorator name.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-07-26 21:37:33 -07:00
53c2907706
New directive %Core.AllowHostnameUnderscore
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-07-26 21:33:39 -07:00
af7107e830
Add note fall through is intentional.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-07-18 10:22:45 -07:00
107b3055a1
Fix var name conflict in loadArray
2013-07-16 21:56:29 -07:00
29a3c70370
A bunch of PHPdoc and php codesniffer corrections - no functional code changes
2013-07-16 21:53:17 -07:00
0680832d41
Use info_parent_def to get parent information, since it may not be present in info array.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-05-21 17:19:59 -07:00
19360ddb36
Ignore commas and nbsps for linkification. Thanks nAS for contributing.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-05-21 16:43:59 -07:00
3c903b7463
Doc fix.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-05-18 08:48:47 -07:00
6e37ecd1c8
Make URI parsing algorithm more strict.
...
Thanks Michael Gusev <mgusev@sugarcrm.com > for contributing this patch.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-04-16 13:56:43 -07:00
d516e2f8de
Release 4.5.0
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-02-17 16:04:08 -08:00
631021733b
Add %Core.DisableExcludes directive
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2013-02-17 15:47:38 -08:00
62d2550e16
Use SHA-1 instead of MD5.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-27 02:33:22 -07:00
087145a71b
Blacklist more tags from RemoveEmpty.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-27 02:32:48 -07:00
a44187a5c1
Cleanup after data validation.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-27 02:30:58 -07:00
c0ad68108a
Do checks against iconvAvailable because PHP 5.4 has botched iconv support.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-27 02:27:57 -07:00
83a574491e
Comment for bug that needs to get fixed.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-11 11:40:02 -07:00
3b537365a4
CSS properties page-break-*
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-10-11 11:39:52 -07:00
72db575446
Fix bug with non-lower case color names in HTML.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-07-30 10:54:32 -04:00
d8bb73ce46
Permit underscores in font-families.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-07-27 18:28:29 -04:00
f90372f8ab
More support for white-space.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-06-16 17:10:36 -04:00
f38fca32a9
Don't lower-case components of background.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-06-02 11:22:58 -04:00
5a23004652
Support for inline-block.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-05-25 23:55:48 -04:00
6705140082
Fix in AttrTransform_Nofollow
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-05-14 23:07:27 -04:00
cb7162a995
Use prepend for autoloading on PHP 5.3+
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-05-02 11:07:24 -04:00
2189a9430f
Support for safe external scripts via explicit whitelist.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-04-27 17:44:49 -04:00
7291f19347
Fix problem where stacked AttrTransforms clobber each other.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-03-16 23:12:16 -04:00
31dce298ea
Actually make URI.DisableResources do something.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-03-02 13:25:00 -05:00
8c9d461a62
Bugfix: _blank not blank.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-02-18 11:28:01 -05:00
17af0e4fc1
Release 4.4.0
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-01-18 19:22:31 -05:00
70028f83d6
Make all of the tests work on all PHP versions.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-01-18 18:57:13 -05:00
1c7fedff5a
Tighter CSS selector validation.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2012-01-17 15:36:26 -05:00
