1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Transitional//EN"
3 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
4 <html xmlns=
"http://www.w3.org/1999/xhtml"
5 xmlns:
xi=
"http://www.w3.org/2001/XInclude"
6 xmlns:
xc=
"urn:xhtml-compiler"
7 xmlns:
rss=
"urn:xhtml-compiler:RSSGenerator"
8 xmlns:
svn=
"urn:xhtml-compiler:Subversion"
9 svn:
head-url=
"$HeadURL: svn+ssh://ezyang@htmlpurifier.org/svnroot/htmlpurifier-web/trunk/index.xhtml $"
10 svn:
revision=
"$Revision: 1139 $"
13 <title>News - HTML Purifier
</title>
14 <xi:include href=
"common-meta.xml" xpointer=
"xpointer(/*/node())" />
15 <meta name=
"description"
16 content=
"Recent news related to HTML Purifier." />
18 content=
"HTMLPurifier, HTML Purifier, HTML, filter, filtering, standards, compliant, w3c, news, blog, releases, rss" />
19 <link rel=
"alternate" type=
"application/rss+xml"
20 title=
"News - HTML Purifier" href=
"news.rss"
21 rss:
for=
"news-container"
22 rss:
description=
"Recent news and updates on HTML Purifier" />
26 <xi:include href=
"common-header.xml" xpointer=
"xpointer(/*/node())" />
27 <h1 id=
"title">News
</h1>
30 <div id=
"news-container" class=
"news">
32 <div class=
"item" id=
"news-2.1.2-released">
33 <h3 class=
"title">HTML Purifier
2.1.2 released
</h3>
34 <div class=
"date">Mon,
03 Sep
2007 16:
06:
00 EDT
</div>
38 Version
2.1.2 is a mix of experimental features and stability updates.
39 Among new features: an Object module for trusted users, support for the
40 CSS property 'border-spacing', and HTML
5 style parsing using PH5P.
41 Bug fixes ihave resolved a few obscure issues including
<code>border-collapse:seperate
</code>,
42 a DirectLex parsing error, broken HTML in printDefinition.php, and problems
43 with the experimental standalone distribution. Also, there were large
44 amounts of behind-the-scenes refactoring and the removal of URIScheme
48 The new PH5P feature is especially exciting, and can be tested at
49 the
<a href=
"demo.php?experimental=1">demo with the experimental flag
</a>.
50 You can enable it using:
52 <pre>require_once 'HTMLPurifier/Lexer/PH5P.php';
53 $config-
>set('Core', 'LexerImpl', 'PH5P');
</pre>
55 Be sure to report bugs! And of course,
56 see
<a href=
"http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.2/NEWS">NEWS
</a>
57 for a complete changelog.
62 <div class=
"item" id=
"news-2.1.1-released">
63 <h3 class=
"title">HTML Purifier
2.1.1 released
</h3>
64 <div class=
"date">Sat,
04 Aug
2007 22:
33:
55 EDT
</div>
68 It looks like I'm going to have to start making release candidates
69 before I release new major versions. There were three show-stopper
70 bugs for version
2.1.0:
74 The
<abbr>PHP
</abbr>5-strict version was missing a lot of new
75 features due to a botched merge, making it functionally equivalent
76 to the previous
2.0.1 release.
79 The new %URI.MakeAbsolute feature, the flagship of the new URI
80 system, just didn't work due to a slight misordering of two
84 The new standalone distribution did not work on
<abbr>PHP
</abbr>4
85 because a
<abbr>PHP
</abbr>5 specific file was inlined, resulting
90 All of these issues have been fixed and our release strategy has been
91 amended to ensure that it does not happen again. See
<a
92 href=
"http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.1/NEWS">NEWS
</a>
93 for a complete changelog, though not much else changed in this version.
98 <div class=
"item" id=
"news-2.1.0-released">
99 <h3 class=
"title">HTML Purifier
2.1.0 released
</h3>
100 <div class=
"date">Thur,
02 Aug
2007 23:
33:
09 EDT
</div>
104 In version
2.1, HTML Purifier's URI validation and filtering handling
105 system has been revamped with a
<a href=
"docs/enduser-uri-filter.html">new, extensible URIFilter system
</a>. Also
106 notable features include preservation of emoticons in PHP5 with
107 <a href=
"live/configdoc/plain.html#Core.AggressivelyFixLt">%Core.AggressivelyFixLt
</a>, standalone and lite download versions,
108 <del>transforming relative URIs to absolute URIs
</del>, Ruby in XHTML
1.1 and UTF-
8 font
109 names. Notable bug-fixes include refinement of
110 the auto-paragraphing algorithm (no longer experimental), better XHTML
111 1.1 support and the removal of the contents of
<code><style
></code> elements.
114 <strong>Update:
</strong> It has come to my attention that there is
115 a bug with the %URI.MakeAbsolute functionality; apply
116 <a href=
"http://htmlpurifier.org/phorum/read.php?3,573,574#msg-574">a patch
</a>
117 to fix the problem, or wait until the next version.
121 href=
"http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.0/NEWS">NEWS
</a>
122 for a complete changelog.
127 <div class=
"item" id=
"news-nightlies">
128 <h3 class=
"title">Nightly Builds Now Available
</h3>
129 <div class=
"date">Tue,
31 July
2007 08:
39:
02 EDT
</div>
133 Nightly builds are now available for HTML Purifier, you can get
134 them here:
<a href=
"download.html#NightlyBuilds">Nightly Builds
</a>.
135 Be sure to check out the
<strong>Standalone
</strong> version: it's
136 essentially HTML Purifier in one file.
141 <div class=
"item" id=
"news-php4">
142 <h3 class=
"title"><abbr>PHP
</abbr>4 end of life announcement
</h3>
143 <div class=
"date">Fri,
13 July
2007 12:
51:
54 EDT
</div>
147 In accordance with
<abbr>PHP
</abbr>'s
<a
148 href=
"http://php.net/#2007-07-13-1">end of life announcement for
149 <abbr>PHP
</abbr>4</a>, HTML Purifier will be adopting an identical
150 policy for support for
<abbr>PHP
</abbr>4. In brief, this means on
151 December
31,
2007, HTML Purifier will transition to a
152 <abbr>PHP
</abbr>5-only codebase, and no more features will be
153 added to the
<abbr>PHP
</abbr>4 version. Critical security fixes
154 will be issued until August
8,
2008, at which time all support for
155 <abbr>PHP
</abbr>4 will be dropped.
158 This is the death knell for
<abbr>PHP
</abbr>4. Long live
164 <div class=
"item" id=
"news-exciting-month">
165 <h3 class=
"title">Exciting month and depressing news
</h3>
166 <div class=
"date">Fri,
29 June
2007 10:
23:
05 EDT
</div>
170 It's been a real exciting month for HTML Purifier. The publicity
171 blitz following HTML Purifier
2.0 doubled our site traffic, and
172 for a brief time we hit the front page on del.icio.us (that nearly
173 tripled our bookmarks). Thank you all who blogged or told your
174 friends about HTML Purifier. Highlights (ordered by my referrer
178 <li>Blog coverage:
<ul>
179 <li><a href=
"http://www.moongift.jp/2007/06/html_purifier/">Moongift
</a> (Japanese)
</li>
180 <li><a href=
"http://shiflett.org/blog/2007/jun/html-purifier">Chris Shiflett
</a></li>
181 <li><a href=
"http://www.mc2design.com/blog/">Luke Visioni (The Ninja Space Goat)
</a></li>
182 <li><a href=
"http://blog.astrumfutura.com/archives/295-html-Purifier-2.0.0-new-version-of-the-PHP-html-filter-library.html">Pádraic Brady (Maugrim the Reaper)
</a></li>
184 <li>Outlet coverage:
<ul>
185 <li><a href=
"http://devzone.zend.com/article/2209-HTML-Purifier-2.0.0-released">Zend Developer Zone
</a></li>
186 <li><a href=
"http://www.dzone.com/rsslinks/html_purifier_200_released.html">DZone
</a></li>
187 <li><a href=
"http://journal.mycom.co.jp/news/2007/06/22/019/index.html">マイコミジャーナル
</a> (Japanese)
</li>
188 <li><a href=
"http://www.nexen.net/actualites/logiciels/17227-html_purifier_2.0.0.php">Nexen.net
</a></li>
189 <li><a href=
"http://entwickler.com/itr/news/psecom,id,35805,nodeid,82.html">Entwickler
</a> (German)
</li>
190 <li><a href=
"http://sentidoweb.com/2007/06/22/html-purifier-filtro-html-en-php.php">Sentido Web
</a> (Spanish)
</li>
191 <li><a href=
"http://phpspot.org/blog/archives/2007/03/htmlxssphphtml.html">PHPSpot
</a></li>
192 <li><a href=
"http://www.php-mag.net/magphpde/magphpde_news/psecom,id,27308,nodeid,5.html">PHP Magazine
</a></li>
194 <li><a href=
"http://christ1an.blogspot.com/2007/06/interview-with-edward-z-yang.html">Interview with Christian Matthies (christ1an)
</a></li>
195 <li>Pro:PHP podcast interview coming soon!
</li>
198 We also have two great new plugins: a
<a href=
"http://www.phorum.org/phorum5/read.php?16,122766">Phorum mod
</a>
199 written by yours truly and a
<a href=
"http://urbangiraffe.com/plugins/html-purified/">Wordpress
</a>
200 plugin written by John Godley. If you use any of this software, be sure
204 <del>And now, for the bad news:
<strong>Effective July
1st through
205 the
28th, I will be unavailable.
</strong> This means no development,
206 no new features, and virtually no support on the forums. I'll attempt
207 to wire in occassionally to ensure that the armageddon has not fallen,
208 but don't expect any miracles.
</del> <del><strong>Update:
</strong>
209 Situation has changed: I will have reasonable amounts of Internet
210 access during the month. While I will be away from my local
211 development environment and probably will not be able to supply
212 patches, I will be able to help folks out on the forums.
</del>
213 <strong>Update
2:
</strong> I am back.
218 <div class=
"item" id=
"news-2.0.1-released">
219 <h3 class=
"title">HTML Purifier
2.0.1 released
</h3>
220 <div class=
"date">Wed,
27 Jun
2007 10:
17:
03 EDT
</div>
224 The
2.0.1 release introduces a number of stability and usability fixes,
225 as well as a number of (disabled by default) experimental features. The
226 security-minded should note that a reflected XSS vulnerability was patched
227 in
<code>smoketests/configForm.php
</code>; if you cannot upgrade immediately, please
228 delete that file (if that directory is not publically accessible, there
229 is no security risk). The maintenance changes include more helpful file
230 permissions errors, internal newline normalization, reordered includes
231 to prevent a missing class definition in some setups, and better cache
232 revision and id handling. The two experimental features are auto-formatting
233 (auto-paragraphing and linkification) and error collection, these can
234 be enabled with
<a href=
"live/configdoc/plain.html#AutoFormat.AutoParagraph">%AutoFormat.AutoParagraph
</a>,
235 <a href=
"live/configdoc/plain.html#AutoFormat.Linkify">%AutoFormat.Linkify
</a> and
236 <a href=
"live/configdoc/plain.html#Core.CollectErrors">%Core.CollectErrors
</a> respectively.
240 href=
"http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS">News
</a>
241 for a complete changelog.
</p>
245 <div class=
"item" id=
"news-2.0.0-released">
246 <h3 class=
"title">HTML Purifier
2.0.0 released
</h3>
247 <div class=
"date">Wed,
20 Jun
2007 20:
01:
01 EDT
</div>
251 HTML Purifier
2.0 is the culmination of two major architectural changes.
252 The first is
<a href=
"docs/enduser-tidy.html">Tidy
</a>, which enables
253 HTML Purifier to both natively support
254 deprecated elements and also convert them to standards-compliant
255 alternatives. The second is the
256 <a href=
"docs/enduser-customize.html">Advanced API
</a>,
257 which enables users to
258 create new elements and attributes with ease. Keeping in line with a
259 commitment to high quality, there are also five esoteric bug-fixes and a
260 plethora of subtle improvements that enhance the library.
264 Because this is a major version number jump, you can read the full
265 article at
<a href=
"news/2.0.0-released.html">2.0.0 Released
</a>.
267 href=
"http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.0/NEWS">News
</a>
268 for a complete changelog.
273 </div> <!-- end news-container -->