1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Transitional//EN"
3 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
5 xmlns=
"http://www.w3.org/1999/xhtml"
6 xmlns:
xi=
"http://www.w3.org/2001/XInclude"
7 xmlns:
xc=
"urn:xhtml-compiler"
10 <title>HTML Purifier
3.1.0 released - News - HTML Purifier
</title>
11 <xi:include href=
"common-meta.xml" xpointer=
"xpointer(/*/node())" />
12 <meta name=
"Date" content=
"Sun, 08 May 2008 14:04:00 EST" />
16 <xi:include href=
"common-header.xml" xpointer=
"xpointer(/*/node())" />
17 <h1 id=
"title">HTML Purifier
3.1.0 released
</h1>
21 HTML Purifier
3.1.0 is the first offical stable release for
3.1 series.
22 It improves HTML Purifier's integration with
<abbr>PHP
</abbr> 5, mainly
23 through the new use of autoloading.
24 It also includes support for the !important CSS modifier,
25 display and visibility CSS properties with %CSS.AllowTricky, marquee with
26 %HTML.Proprietary (had you scared for a moment, hmm?), a kses() wrapper,
27 %CSS.AllowedProperties, %HTML.ForbiddenAttributes and
28 %HTML.ForbiddenElements and a totally revamped ConfigDoc system. Since the
29 release candidate, there have also been a number of stability fixes such as
30 improved URI escaping, a change in serializer ID format, and a relaxed
31 format for %HTML.Allowed. And as always, numerous bugfixes.
34 <strong>Important:
</strong> HTML Purifier
3.1.0 also fixes a
35 security vulnerability. Please upgrade your libraries as quickly as
36 possible. The vulnerability was discovered internally, and no known
37 exploits have been found in the wild.
40 For a detailed migration guide, please see the
41 <a xc:
absolute=
"href" href=
"news/2008/3.1.0-released.html">3.1.0 release page
</a>. If
42 you had been using the release candidate, you do not need to worry