| blob | f21a3b0516774225929f7ea98eb18dd5f912e0f0 |
10 <head>
16 content="HTMLPurifier, HTML Purifier, HTML, filter, filtering, standards, compliant, w3c, news, blog, releases, rss" />
21 </head>
22 <body>
31 <div>
38 <p>
39 After several weeks of testing, HTML Purifier is proud to announce that
40 it will be switching to Git as its source control management system.
41 Git offers a number of advantages over Subversion:
42 </p>
43 <ul>
44 <li>
46 merge-tracking which somewhat diminishes this benefit, but implementing
47 that is entirely at the whimsy of Dreamhost, which I am not going to
48 bother with.
49 </li>
50 <li>
52 easy to do local development and submit patches.
53 </li>
54 <li>
56 history, making it extremely difficult to lose data. This is opposed
57 to our current setup, where htmlpurifier.org is a central point of failure,
58 and backups are sent to only one other machine.
59 </li>
60 <li>
62 and network operations. Gone are the days of waiting several minutes
63 for Subversion to finish committing.
64 </li>
65 </ul>
66 <p>
69 worked out. There are number of features such as nightly snapshot
70 generation and contributor documentation that needs to be written.
71 </p>
72 <p>
74 as our primary remote repository; push access will be administered there,
75 and changes will be mirrored (courtesy of a script by aeruder at #git)
78 If you want to grab a development copy, use this command:
79 </p>
81 <p>
82 Feel free to play around, and register comments and complaints at
84 </p>
85 </div>
86 </div>
93 <p>
94 HTML Purifier 3.1.1 is a security and bugfix release. This release addresses
96 applies to users using Shift_JIS as their output encoding. There is also
97 a security improvement regarding the imagecrash attack. There is a backwards
98 incompatible change with %URI.Munge, in which resources are no longer munged
99 by default; please enable using %URI.MungeResources. Besides this, there
101 %URI.MungeSecretKey, as well as an experimental implementation of
102 %HTML.SafeObject and %HTML.SafeEmbed. There are also some memory optimizations.
103 </p>
104 <p>
105 As a security release, please update as quickly as possible. Care has been
106 taken to prevent backwards-compatibiilty breakage this time (something that
107 plagued users who tried to upgrade to 3.1.0), there is only one slight break
108 related to a bugfix that can be easily undone with %URI.MungeResources.
109 </p>
110 <p>
112 for a complete changelog. There were numerous added configuration directives
113 not mentioned above.
114 </p>
115 <p>
116 Along with this release, we would like to announce full disclosure on
117 the security vulnerability patched in 3.1.0. Please see
119 for more information about the vulnerability affecting versions prior
121 </p>
122 <p>
123 Finally, the security fixes and bug fixes were backported to our PHP4
124 branch with the release of HTML Purifier 2.1.5. See
126 for a complete changelog.
127 </p>
128 </div>
129 </div>
136 <p>
137 This is a security and bugfix release for the HTML Purifier 2.1
138 series, and should only be downloaded by developers stuck on
140 libraries as quickly as
141 possible. The vulnerability was discovered internally, and no known
142 exploits have been found in the wild. This is the same vulnerability
143 as was fixed in HTML Purifier 3.1.0.
144 </p>
145 <p>
147 for a complete changelog.
148 </p>
149 </div>
150 </div>
152 </div>
154 <!-- New news container! -->
157 </div>
159 </body>
160 </html>