Add security vulnerability notice.
[htmlpurifier-web.git] / news.xhtml
blobef525a7c331189a94ed0825fca4c70ecc620a967
1 <?xml version="1.0" encoding="UTF-8"?>
2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
3 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
4 <html xmlns="http://www.w3.org/1999/xhtml"
5 xmlns:xi="http://www.w3.org/2001/XInclude"
6 xmlns:xc="urn:xhtml-compiler"
7 xmlns:rss="urn:xhtml-compiler:RSSGenerator"
8 xmlns:svn="urn:xhtml-compiler:Subversion"
9 svn:head-url="$HeadURL: svn+ssh://ezyang@htmlpurifier.org/svnroot/htmlpurifier-web/trunk/index.xhtml $"
10 svn:revision="$Revision: 1139 $"
11 xml:lang="en">
12 <head>
13 <title>News - HTML Purifier</title>
14 <xi:include href="common-meta.xml" xpointer="xpointer(/*/node())" />
15 <meta name="description"
16 content="Recent news related to HTML Purifier." />
17 <meta name="keywords"
18 content="HTMLPurifier, HTML Purifier, HTML, filter, filtering, standards, compliant, w3c, news, blog, releases, rss" />
19 <link rel="alternate" type="application/rss+xml"
20 title="News - HTML Purifier" href="news.rss"
21 rss:for="news-container"
22 rss:description="Recent news and updates on HTML Purifier" />
23 </head>
24 <body>
26 <xi:include href="common-header.xml" xpointer="xpointer(/*/node())" />
27 <h1 id="title">News</h1>
29 <div id="content">
31 <xi:include href="download-box.xml" xpointer="xpointer(/*/node())" />
33 <div id="news-container" class="news">
35 <div class="item" id="news-2.1.4-released">
36 <h3 class="title">HTML Purifier 2.1.4 released</h3>
37 <div class="date">Sun, 18 May 2008 15:27:00 EST</div>
39 <div class="body">
40 <p>
41 This is a security and bugfix release for the HTML Purifier 2.1
42 series, and should only be downloaded by developers stuck on
43 <abbr>PHP</abbr> 4. <strong>Important:</strong> Please upgrade your
44 libraries as quickly as
45 possible. The vulnerability was discovered internally, and no known
46 exploits have been found in the wild. This is the same vulnerability
47 as was fixed in HTML Purifier 3.1.0.
48 </p>
49 <p>
50 See <a href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.4/NEWS">NEWS</a>
51 for a complete changelog.
52 </p>
53 </div>
54 </div>
56 <div class="item" id="news-3.1.0-released">
57 <h3 class="title">HTML Purifier 3.1.0 released</h3>
58 <div class="date">Sun, 08 May 2008 14:04:00 EST</div>
60 <div class="body">
61 <p>
62 HTML Purifier 3.1.0 is the first offical stable release for 3.1 release.
63 It improves HTML Purifier's integration with <abbr>PHP</abbr> 5, mainly
64 through the new use of autoloading.
65 It also includes support for the !important CSS modifier,
66 display and visibility CSS properties with %CSS.AllowTricky, marquee with
67 %HTML.Proprietary (had you scared for a moment, hmm?), a kses() wrapper,
68 %CSS.AllowedProperties, %HTML.ForbiddenAttributes and
69 %HTML.ForbiddenElements and a totally revamped ConfigDoc system. Since the
70 release candidate, there have also been a number of stability fixes such as
71 improved URI escaping, a change in serializer ID format, and a relaxed
72 format for %HTML.Allowed. And as always, numerous bugfixes.
73 </p>
74 <p>
75 <strong>Important:</strong> HTML Purifier 3.1.0 also fixes a
76 security vulnerability. Please upgrade your libraries as quickly as
77 possible. The vulnerability was discovered internally, and no known
78 exploits have been found in the wild.
79 </p>
80 <p>
81 For a detailed migration guide, please see the
82 <a href="news/2008/3.1.0-released.html">3.1.0 release page</a>. If
83 you had been using the release candidate, you do not need to worry
84 about this.
85 </p>
86 </div>
87 </div>
89 <div class="item" id="news-3.1.0rc1-released">
90 <h3 class="title">HTML Purifier 3.1.0 release candidate</h3>
91 <div class="date">Tue, 22 Apr 2008 02:51:00 EST</div>
93 <div class="body">
94 <p>
95 I assure you, this has <em>never</em> happened before to HTML Purifier;
96 never before have we had a release candidate. I assure you, there is
97 something big with this release, and that's why I am painstakingly
98 doing a release candidate before the official 3.1 series begins.
99 </p>
101 To read more about it, please check out the
102 <a href="news/2008/3.1.0rc1-released.html">3.1.0rc1 release candidate page</a>.
103 </p>
104 </div>
105 </div>
107 <div class="item" id="news-3.0.0-released">
108 <h3 class="title">HTML Purifier 3.0.0 released</h3>
109 <div class="date">Sun, 06 Jan 2008 10:44:00 EST</div>
111 <div class="body">
113 Release 3.0.0 is the first release of 2008 and also HTML Purifier's first
114 <a href="http://gophp5.org/">PHP 5 only</a> release.
115 The 2.1 series will still
116 <a href="download.html#PHP4">be supported for bug and security fixes,</a>
117 but will not get new features. This release a number of
118 improvements in <abbr>CSS</abbr> handling, including the filter
119 <code>HTMLPurifier_Filter_ExtractStyleBlocks</code> which integrates
120 HTML Purifier with
121 <a href="http://csstidy.sourceforge.net/">CSSTidy</a> for cleaning style sheets
122 (see the source code file for more information on usage), contains
123 experimental support for
124 proprietary <abbr>CSS</abbr> properties with %CSS.Proprietary, case-insensitive
125 <abbr>CSS</abbr> properties, and more lenient hexadecimal color codes. Also, all code
126 has been upgraded to full <abbr>PHP</abbr> 5 and is
127 <code>E_STRICT</code> clean for all versions of PHP 5 (including the
128 5.0 series, which previously had parse-time errors).
129 </p>
131 See <a href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/3.0.0/NEWS">NEWS</a>
132 for a complete changelog.
133 </p>
134 </div>
135 </div>
137 <div class="item" id="news-2.1.3-released">
138 <h3 class="title">HTML Purifier 2.1.3 released</h3>
139 <div class="date">Tue, 06 Nov 2007 11:32:22 EST</div>
141 <div class="body">
143 Stability release 2.1.3 fixes a slew of minor bugs found in HTML Purifier,
144 and also includes some internal code enhancements and refactorings.
145 Notably, tests/multitest.php automates testing in multiple versions,
146 fatal AttrDef_URI_Email error fixed, blockquote contents are more lenient
147 in HTML 4.01 Strict and fatal errors involving ID tags in img tags were
148 fixed.
149 </p>
151 See <a href="http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.1.3/NEWS">NEWS</a>
152 for a complete changelog.
153 </p>
154 </div>
155 </div>
158 </div> <!-- end news-container -->
160 </div>
162 </body>
163 </html>