Edward Z. Yang 6e37ecd1c8 Make URI parsing algorithm more strict. ...

Thanks Michael Gusev <mgusev@sugarcrm.com> for contributing this patch.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>

2013-04-16 13:56:43 -07:00

..

AttrDef

Fix bug with non-lower case color names in HTML.

2012-07-30 10:54:32 -04:00

AttrTransform

Fix in AttrTransform_Nofollow

2012-05-14 23:07:27 -04:00

ChildDef

Fix broken table content model, easily seen in XHTML1.1

2011-12-26 14:49:26 +08:00

ConfigSchema

Add %Core.DisableExcludes directive

2013-02-17 15:47:38 -08:00

DefinitionCache

Add new Cache.SerializerPermissions option.

2011-01-13 22:57:40 +00:00

EntityLookup

Fix missing numeric entities (shows up when DirectLexing).

2011-02-27 11:58:37 +00:00

Filter

Don't lower-case components of background.

2012-06-02 11:22:58 -04:00

HTMLModule

Support for safe external scripts via explicit whitelist.

2012-04-27 17:44:49 -04:00

Injector

Blacklist more tags from RemoveEmpty.

2012-10-27 02:32:48 -07:00

Language

Emit errors when body is extracted.

2010-05-04 13:41:09 -04:00

Lexer

Remove PEARSax3 lexer.

2012-01-03 20:40:17 +08:00

Printer

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

Strategy

Add %Core.DisableExcludes directive

2013-02-17 15:47:38 -08:00

TagTransform

Fix E_NOTICE from indexing into empty string.

2011-03-17 17:33:11 +00:00

Token

Fix removal of id with DirectLex by preserving armor.

2010-10-28 17:25:31 +01:00

URIFilter

Remark about bypassing host list with punycode.

2012-01-06 05:32:53 -08:00

URIScheme

Cleanup after data validation.

2012-10-27 02:30:58 -07:00

VarParser

Add documentation about configuration directive types.

2010-09-04 02:28:53 -04:00

AttrCollections.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

AttrDef.php

Rewrite CSS url() and font-family output logic.

2010-05-31 18:45:21 -07:00

AttrTransform.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

AttrTypes.php

Make forms work for transitional doctypes.

2011-12-30 22:56:44 +08:00

AttrValidator.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Bootstrap.php

Use prepend for autoloading on PHP 5.3+

2012-05-02 11:07:24 -04:00

ChildDef.php

Implement "carryover" functionality, requested by Kinderlehrer <bitweaver@7doves.com>

2008-12-20 13:06:00 -05:00

Config.php

Release 4.5.0

2013-02-17 16:04:08 -08:00

ConfigSchema.php

Check if schema.ser was corrupted.

2010-10-29 14:47:40 +01:00

ContentSets.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Context.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

CSSDefinition.php

CSS properties page-break-*

2012-10-11 11:39:52 -07:00

Definition.php

Fix two bugs with caching of customized raw definitions.

2010-12-30 23:51:53 +00:00

DefinitionCache.php

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

DefinitionCacheFactory.php

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

Doctype.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

DoctypeRegistry.php

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

ElementDef.php

Fix problem where stacked AttrTransforms clobber each other.

2012-03-16 23:12:16 -04:00

Encoder.php

Do checks against iconvAvailable because PHP 5.4 has botched iconv support.

2012-10-27 02:27:57 -07:00

EntityLookup.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

EntityParser.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

ErrorCollector.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

ErrorStruct.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Exception.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Filter.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Generator.php

Fix Internet Explorer innerHTML bug.

2011-03-27 11:50:52 +01:00

HTMLDefinition.php

Explicitly initialize anonModule to null.

2011-04-19 22:46:17 +01:00

HTMLModule.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

HTMLModuleManager.php

Support for safe external scripts via explicit whitelist.

2012-04-27 17:44:49 -04:00

IDAccumulator.php

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

Injector.php

Fix allowsElement() bug manifesting in LinkifyTest.

2009-06-10 18:11:34 -04:00

Language.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

LanguageFactory.php

Convert all to new configuration get/set format.

2009-02-21 03:00:34 -05:00

Length.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Lexer.php

Escape CDATA before handling conditional comments.

2010-09-28 12:11:26 -04:00

PercentEncoder.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Printer.php

Fix CSSDefinition Printer problems with important decorator.

2009-02-15 14:11:22 -05:00

PropertyList.php

Convert HTMLPurifier_Config to use property list backend.

2009-02-02 18:42:23 -05:00

PropertyListIterator.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Strategy.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

StringHash.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

StringHashParser.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

TagTransform.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

Token.php

Implement "carryover" functionality, requested by Kinderlehrer <bitweaver@7doves.com>

2008-12-20 13:06:00 -05:00

TokenFactory.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

UnitConverter.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

URI.php

Add isBenign and getDefaultScheme methods.

2011-12-25 23:31:15 +08:00

URIDefinition.php

Actually make URI.DisableResources do something.

2012-03-02 13:25:00 -05:00

URIFilter.php

Implement Iframe module, and provide %HTML.SafeIframe and %URI.SafeIframeRegexp for untrusted usage.

2011-12-26 21:50:53 +08:00

URIParser.php

Make URI parsing algorithm more strict.

2013-04-16 13:56:43 -07:00

URIScheme.php

URI.Munge munges https to http URIs.

2011-04-10 13:09:24 +01:00

URISchemeRegistry.php

Remove PHP4 cruft from URISchemeRegistry.

2009-05-13 16:14:57 -04:00

VarParser.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00

VarParserException.php

Add vim modelines to all files.

2008-12-06 04:24:59 -05:00