da94d3d6ac
Always quote the contents of url() in CSS.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-04-26 12:10:15 -04:00
80793e925e
Remove +x bit from RemoveSpansWithoutAttributes.php
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-04-17 00:23:09 -04:00
8ef4fb22db
Support for flashvars in HTML.SafeEmbed.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-30 13:33:13 -04:00
70a7a3f5dd
Handle <ol><ol> properly by adding missing <li> tag.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-10 00:58:37 -05:00
4d612d5a77
Improve handling of malformed object parameters.
...
When specifying source material for <object> tags, you must use
data inside the object tag as well as specify movie in a param.
If you specify a src (which is the appropriate markup for <embed>)
we now convert and fill in the other attributes appropriately.
Also, fix a PHP warning in Generator code.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-09 17:29:38 -05:00
63a854ee5d
Remove call-time pass-by-reference.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-08 03:45:11 -05:00
0229458f8f
Implement Internet Explorer compatibility code for embedded content.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-08 01:56:40 -05:00
baa477ac08
Truncate alt text from src if it's too long.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-08 01:22:21 -05:00
dc90e8e85b
Support flashvars.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-08 01:16:57 -05:00
97125ed18b
Implement data URI scheme.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-07 21:45:39 -05:00
9a9036c689
Implement auto-formatter that removes empty span tags.
...
Signed-off-by: Paul Stone <patches@pdjs.co.uk >
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-07 18:59:33 -05:00
aea7d02dfe
Support YouTube slideshow embedding.
...
YouTube slideshows contain a /cp/, not a /v/, in their URL;
relax the YouTube filter to allow them.
Signed-off-by: Nigel McNie <nigel@catalyst.net.nz >
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-03-07 18:57:22 -05:00
b3ca1498c2
Add boolean value flag for PEARSax3 for testing if a token is empty.
...
Signed-off-by: Brian DeRocher <brian@derocher.org >
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-02-26 21:36:51 -05:00
ac18672aba
Fix extant broken PEARSax3 parsing patterns.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-02-26 21:14:52 -05:00
faf28682ad
Manually work around PEARSax3 E_STRICT errors.
...
Previously, my development environment was not running the PEARSax3
tests because my environment was set to E_STRICT error handling, and
thus the tests were skipped. Relax this requirement by making the
wrapper class E_STRICT safe. This introduces a few failing tests.
Also update TODO and add another fresh test.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-02-26 20:42:42 -05:00
694583259c
Fix autoparagraph bug with non-inline elements.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2010-02-15 02:55:33 -05:00
5b4e5c983e
Support proprietary height attribute on table.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2009-08-27 20:17:24 -04:00
1ad8fd5ce9
Gracefully deal with null injectors.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2009-08-27 20:03:31 -04:00
53ff3e2744
Release 4.0.0.
...
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2009-07-07 22:41:01 -04:00
ba9fd175d7
Make extractBody not terminate prematurely on first </body>.
...
Previously, if two </body> tags were present, HTML Purifier
would truncate everything after the first </body>. This is
not ideal behavior; so HTML Purifier has been changed to
match up to the last </body>.
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2009-07-07 22:19:04 -04:00
4d27906b02
Make %URI.Munge respect %URI.Host (don't munge).
...
%URI.Munge incorrectly munged URIs that pointed to the
same host as the current website (it did, however, have
the correct behavior for when the munge URL was on the
same server).
Signed-off-by: Edward Z. Yang <ezyang@mit.edu >
2009-07-06 22:04:51 -04:00
c7594487a2
Fix inability to totally override content model.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-06-10 18:24:52 -04:00
733a5ce5c3
Fix allowsElement() bug manifesting in LinkifyTest.
...
Thanks frank farmer for reporting.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-06-10 18:11:34 -04:00
e8abd5953c
Fix prototype impedance in HTMLDefinition and typo in
...
docs/enduser-customize.html
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-06-07 16:05:46 -04:00
1b8c8865b2
Fix PHP 5.3.0 problem with numeric indices causing -0 problem.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-06-07 16:04:07 -04:00
6e66dc9cad
Add HTMLPurifier_config->serialize()
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-30 00:25:14 -04:00
5bf7ac4e9f
Add docs and facilities for having separate directories of schemas.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-29 22:16:35 -04:00
a025203b18
Minor updates to Config and TODO items thereof.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-29 18:03:57 -04:00
777781a95c
Don't have mute error handler be private.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-29 17:59:30 -04:00
4a87f732ca
Fix two minor bugs, updating Phorum and removing unused $dir variable.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-27 01:17:23 -04:00
84abae08f5
Relax allowed values of class for certain doctypes, see %Attr.ClassUseCDATA
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-26 01:07:40 -04:00
10e2d32a79
Lock configuration objects to a single namespace, to help prevent bugs.
...
* Also, fix a slight bug with URI definition clearing.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-25 23:38:49 -04:00
baf053b016
Implement %Attr.AllowedClasses and %Attr.ForbiddenClasses.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-25 22:08:45 -04:00
bfbe29d5a1
Rename ExtractStyleBlocks configuration parameters.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-25 21:54:39 -04:00
e194b8efc6
Rename AutoFormatParam.PurifierLinkifyDocURL.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-25 21:51:08 -04:00
24f761d84a
Remove PHP4 cruft from URISchemeRegistry.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-05-13 16:14:57 -04:00
e3c2063f69
Implement %AutoFormat.RemoveEmpty.RemoveNbsp, by popular demand.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-04-09 00:53:19 -04:00
398a02039e
Implement %HTML.Attr.Name.UseCDATA which relaxes name validation rules.
...
Sponsored-by: Ian Cook <thinkspill@gmail.com >
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-03-20 19:34:38 -04:00
eaa906f8fc
Implement configuration inheritance.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-21 03:01:02 -05:00
86ca784da3
Convert all to new configuration get/set format.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-21 03:00:34 -05:00
b107eec452
Revamp configuration backend.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-21 03:00:33 -05:00
fcbf724e6e
Make name="" and id="" play nicely together.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-21 02:58:30 -05:00
e9f529e78f
Release 3.3.0.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-16 17:18:31 -05:00
77f57aa264
Fix CSSDefinition Printer problems with important decorator.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-15 14:11:22 -05:00
db218c7b2b
Fix YouTube rendering problem on versions of Firefox.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-15 14:11:21 -05:00
07ed1bbf8c
Fix broken trusted comments functionality.
...
This fix is slightly hackish, as we simply treat comments as whitespace.
This should largely be correct, and breaks no current test cases,
although it could result in noncompliant behavior.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-05 18:04:10 -05:00
b9094d5ec8
Convert HTMLPurifier_Config to use property list backend.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-02 18:42:23 -05:00
1b962e68f0
Downgrade directory not found and permissions errors to warnings.
...
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2009-02-02 10:08:37 -05:00
bfe474042f
Implement "carryover" functionality, requested by Kinderlehrer <bitweaver@7doves.com>
...
This commit is a limited implementation of the "active formatting
elements" algorithm implemented in HTML5, which preserves certain
formatting elements such as <a> and <b> when exiting or entering nodes.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2008-12-20 13:06:00 -05:00
3dfcd016d3
Fix standards-compliance issue with YouTube filter with double hyphens.
...
Thanks Pierre Attar for reporting.
Signed-off-by: Edward Z. Yang <edwardzyang@thewritingpot.com >
2008-12-12 16:27:23 -05:00
