Update isLocal() to use modernized algorithm.
[htmlpurifier-web.git] / news.xhtml
blob013a6f6bc1696a8323c79e041e1392d19da88a37
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
3 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
4 <html xmlns="http://www.w3.org/1999/xhtml"
5 xmlns:xi="http://www.w3.org/2001/XInclude"
6 xmlns:xc="urn:xhtml-compiler"
7 xmlns:rss="urn:xhtml-compiler:RSSGenerator"
8 xmlns:svn="urn:xhtml-compiler:Subversion"
9 svn:head-url="$HeadURL: svn+ssh://ezyang@htmlpurifier.org/svnroot/htmlpurifier-web/trunk/index.xhtml $"
10 svn:revision="$Revision: 1139 $"
11 xml:lang="en">
12 <head>
13 <title>News - HTML Purifier</title>
14 <xi:include href="common-meta.xml" xpointer="xpointer(/*/node())" />
15 <meta name="description"
16 content="Recent news related to HTML Purifier." />
17 <meta name="keywords"
18 content="HTMLPurifier, HTML Purifier, HTML, filter, filtering, standards, compliant, w3c, news, blog, releases, rss" />
19 <link rel="alternate" type="application/rss+xml"
20 title="News - HTML Purifier" href="news.rss"
21 rss:for="news-container"
22 rss:description="Recent news and updates on HTML Purifier" />
23 </head>
24 <body>
26 <xi:include href="common-header.xml" xpointer="xpointer(/*/node())" />
27 <h1 id="title">News</h1>
29 <div id="content">
30 <div id="news-container" class="news">
32 <div class="item" id="news-2.1.2-released">
33 <h3 class="title">HTML Purifier 2.1.2 released</h3>
34 <div class="date">Mon, 03 Sep 2007 16:06:00 EDT</div>
36 <div class="body">
37 <p>
38 Version 2.1.2 is a mix of experimental features and stability updates.
39 Among new features: an Object module for trusted users, support for the
40 CSS property 'border-spacing', and HTML 5 style parsing using PH5P.
41 Bug fixes ihave resolved a few obscure issues including <code>border-collapse:seperate</code>,
42 a DirectLex parsing error, broken HTML in printDefinition.php, and problems
43 with the experimental standalone distribution. Also, there were large
44 amounts of behind-the-scenes refactoring and the removal of URIScheme
45 inclusion reflection.
46 </p>
47 <p>
48 The new PH5P feature is especially exciting, and can be tested at
49 the <a href="demo.php?experimental=1">demo with the experimental flag</a>.
50 You can enable it using:
51 </p>
52 <pre>require_once 'HTMLPurifier/Lexer/PH5P.php';
53 $config->set('Core', 'LexerImpl', 'PH5P');</pre>
54 <p>
55 Be sure to report bugs! And of course,
56 see <a href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.2/NEWS">NEWS</a>
57 for a complete changelog.
58 </p>
59 </div>
60 </div>
62 <div class="item" id="news-2.1.1-released">
63 <h3 class="title">HTML Purifier 2.1.1 released</h3>
64 <div class="date">Sat, 04 Aug 2007 22:33:55 EDT</div>
66 <div class="body">
67 <p>
68 It looks like I'm going to have to start making release candidates
69 before I release new major versions. There were three show-stopper
70 bugs for version 2.1.0:
71 </p>
72 <ul>
73 <li>
74 The <abbr>PHP</abbr>5-strict version was missing a lot of new
75 features due to a botched merge, making it functionally equivalent
76 to the previous 2.0.1 release.
77 </li>
78 <li>
79 The new %URI.MakeAbsolute feature, the flagship of the new URI
80 system, just didn't work due to a slight misordering of two
81 method calls.
82 </li>
83 <li>
84 The new standalone distribution did not work on <abbr>PHP</abbr>4
85 because a <abbr>PHP</abbr>5 specific file was inlined, resulting
86 in a parse error.
87 </li>
88 </ul>
89 <p>
90 All of these issues have been fixed and our release strategy has been
91 amended to ensure that it does not happen again. See <a
92 href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.1/NEWS">NEWS</a>
93 for a complete changelog, though not much else changed in this version.
94 </p>
95 </div>
96 </div>
98 <div class="item" id="news-2.1.0-released">
99 <h3 class="title">HTML Purifier 2.1.0 released</h3>
100 <div class="date">Thur, 02 Aug 2007 23:33:09 EDT</div>
102 <div class="body">
104 In version 2.1, HTML Purifier's URI validation and filtering handling
105 system has been revamped with a <a href="docs/enduser-uri-filter.html">new, extensible URIFilter system</a>. Also
106 notable features include preservation of emoticons in PHP5 with
107 <a href="live/configdoc/plain.html#Core.AggressivelyFixLt">%Core.AggressivelyFixLt</a>, standalone and lite download versions,
108 <del>transforming relative URIs to absolute URIs</del>, Ruby in XHTML 1.1 and UTF-8 font
109 names. Notable bug-fixes include refinement of
110 the auto-paragraphing algorithm (no longer experimental), better XHTML
111 1.1 support and the removal of the contents of <code>&lt;style&gt;</code> elements.
112 </p>
114 <strong>Update:</strong> It has come to my attention that there is
115 a bug with the %URI.MakeAbsolute functionality; apply
116 <a href="http://htmlpurifier.org/phorum/read.php?3,573,574#msg-574">a patch</a>
117 to fix the problem, or wait until the next version.
118 </p>
120 As usual, see <a
121 href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.0/NEWS">NEWS</a>
122 for a complete changelog.
123 </p>
124 </div>
125 </div>
127 <div class="item" id="news-nightlies">
128 <h3 class="title">Nightly Builds Now Available</h3>
129 <div class="date">Tue, 31 July 2007 08:39:02 EDT</div>
131 <div class="body">
133 Nightly builds are now available for HTML Purifier, you can get
134 them here: <a href="download.html#NightlyBuilds">Nightly Builds</a>.
135 Be sure to check out the <strong>Standalone</strong> version: it's
136 essentially HTML Purifier in one file.
137 </p>
138 </div>
139 </div>
141 <div class="item" id="news-php4">
142 <h3 class="title"><abbr>PHP</abbr>4 end of life announcement</h3>
143 <div class="date">Fri, 13 July 2007 12:51:54 EDT</div>
145 <div class="body">
147 In accordance with <abbr>PHP</abbr>'s <a
148 href="http://php.net/#2007-07-13-1">end of life announcement for
149 <abbr>PHP</abbr>4</a>, HTML Purifier will be adopting an identical
150 policy for support for <abbr>PHP</abbr>4. In brief, this means on
151 December 31, 2007, HTML Purifier will transition to a
152 <abbr>PHP</abbr>5-only codebase, and no more features will be
153 added to the <abbr>PHP</abbr>4 version. Critical security fixes
154 will be issued until August 8, 2008, at which time all support for
155 <abbr>PHP</abbr>4 will be dropped.
156 </p>
158 This is the death knell for <abbr>PHP</abbr>4. Long live
159 <abbr>PHP</abbr>!
160 </p>
161 </div>
162 </div>
164 <div class="item" id="news-exciting-month">
165 <h3 class="title">Exciting month and depressing news</h3>
166 <div class="date">Fri, 29 June 2007 10:23:05 EDT</div>
168 <div class="body">
170 It's been a real exciting month for HTML Purifier. The publicity
171 blitz following HTML Purifier 2.0 doubled our site traffic, and
172 for a brief time we hit the front page on del.icio.us (that nearly
173 tripled our bookmarks). Thank you all who blogged or told your
174 friends about HTML Purifier. Highlights (ordered by my referrer
175 logs):
176 </p>
177 <ul>
178 <li>Blog coverage:<ul>
179 <li><a href="http://www.moongift.jp/2007/06/html_purifier/">Moongift</a> (Japanese)</li>
180 <li><a href="http://shiflett.org/blog/2007/jun/html-purifier">Chris Shiflett</a></li>
181 <li><a href="http://www.mc2design.com/blog/">Luke Visioni (The Ninja Space Goat)</a></li>
182 <li><a href="http://blog.astrumfutura.com/archives/295-html-Purifier-2.0.0-new-version-of-the-PHP-html-filter-library.html">Pádraic Brady (Maugrim the Reaper)</a></li>
183 </ul></li>
184 <li>Outlet coverage:<ul>
185 <li><a href="http://devzone.zend.com/article/2209-HTML-Purifier-2.0.0-released">Zend Developer Zone</a></li>
186 <li><a href="http://www.dzone.com/rsslinks/html_purifier_200_released.html">DZone</a></li>
187 <li><a href="http://journal.mycom.co.jp/news/2007/06/22/019/index.html">マイコミジャーナル</a> (Japanese)</li>
188 <li><a href="http://www.nexen.net/actualites/logiciels/17227-html_purifier_2.0.0.php">Nexen.net</a></li>
189 <li><a href="http://entwickler.com/itr/news/psecom,id,35805,nodeid,82.html">Entwickler</a> (German)</li>
190 <li><a href="http://sentidoweb.com/2007/06/22/html-purifier-filtro-html-en-php.php">Sentido Web</a> (Spanish)</li>
191 <li><a href="http://phpspot.org/blog/archives/2007/03/htmlxssphphtml.html">PHPSpot</a></li>
192 <li><a href="http://www.php-mag.net/magphpde/magphpde_news/psecom,id,27308,nodeid,5.html">PHP Magazine</a></li>
193 </ul></li>
194 <li><a href="http://christ1an.blogspot.com/2007/06/interview-with-edward-z-yang.html">Interview with Christian Matthies (christ1an)</a></li>
195 <li>Pro:PHP podcast interview coming soon!</li>
196 </ul>
198 We also have two great new plugins: a <a href="http://www.phorum.org/phorum5/read.php?16,122766">Phorum mod</a>
199 written by yours truly and a <a href="http://urbangiraffe.com/plugins/html-purified/">Wordpress</a>
200 plugin written by John Godley. If you use any of this software, be sure
201 to go check it out!
202 </p>
204 <del>And now, for the bad news: <strong>Effective July 1st through
205 the 28th, I will be unavailable.</strong> This means no development,
206 no new features, and virtually no support on the forums. I'll attempt
207 to wire in occassionally to ensure that the armageddon has not fallen,
208 but don't expect any miracles.</del> <del><strong>Update:</strong>
209 Situation has changed: I will have reasonable amounts of Internet
210 access during the month. While I will be away from my local
211 development environment and probably will not be able to supply
212 patches, I will be able to help folks out on the forums.</del>
213 <strong>Update 2:</strong> I am back.
214 </p>
215 </div>
216 </div>
218 <div class="item" id="news-2.0.1-released">
219 <h3 class="title">HTML Purifier 2.0.1 released</h3>
220 <div class="date">Wed, 27 Jun 2007 10:17:03 EDT</div>
222 <div class="body">
224 The 2.0.1 release introduces a number of stability and usability fixes,
225 as well as a number of (disabled by default) experimental features. The
226 security-minded should note that a reflected XSS vulnerability was patched
227 in <code>smoketests/configForm.php</code>; if you cannot upgrade immediately, please
228 delete that file (if that directory is not publically accessible, there
229 is no security risk). The maintenance changes include more helpful file
230 permissions errors, internal newline normalization, reordered includes
231 to prevent a missing class definition in some setups, and better cache
232 revision and id handling. The two experimental features are auto-formatting
233 (auto-paragraphing and linkification) and error collection, these can
234 be enabled with <a href="live/configdoc/plain.html#AutoFormat.AutoParagraph">%AutoFormat.AutoParagraph</a>,
235 <a href="live/configdoc/plain.html#AutoFormat.Linkify">%AutoFormat.Linkify</a> and
236 <a href="live/configdoc/plain.html#Core.CollectErrors">%Core.CollectErrors</a> respectively.
237 </p>
239 <p>As usual, see <a
240 href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS">News</a>
241 for a complete changelog.</p>
242 </div>
243 </div>
245 <div class="item" id="news-2.0.0-released">
246 <h3 class="title">HTML Purifier 2.0.0 released</h3>
247 <div class="date">Wed, 20 Jun 2007 20:01:01 EDT</div>
249 <div class="body">
251 HTML Purifier 2.0 is the culmination of two major architectural changes.
252 The first is <a href="docs/enduser-tidy.html">Tidy</a>, which enables
253 HTML Purifier to both natively support
254 deprecated elements and also convert them to standards-compliant
255 alternatives. The second is the
256 <a href="docs/enduser-customize.html">Advanced API</a>,
257 which enables users to
258 create new elements and attributes with ease. Keeping in line with a
259 commitment to high quality, there are also five esoteric bug-fixes and a
260 plethora of subtle improvements that enhance the library.
261 </p>
264 Because this is a major version number jump, you can read the full
265 article at <a href="news/2.0.0-released.html">2.0.0 Released</a>.
266 See <a
267 href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.0/NEWS">News</a>
268 for a complete changelog.
269 </p>
270 </div>
271 </div>
273 </div> <!-- end news-container -->
275 </div>
277 </body>
278 </html>