Don't unset parser variable; plays poorly with serialize.
[htmlpurifier.git] / WHATSNEW
blob09110a73fcd9bc25adaf6a61aa5e1b416d688d57
1 HTML Purifier 4.3.0 is a major security release addressing various
2 security vulnerabilities related to user-submitted code and legitimate
3 client-side scripts.  It also contains an accumulation of new features
4 and bugfixes over half a year.  New configuration options include
5 %CSS.Trusted, %CSS.AllowedFonts and %Cache.SerializerPermissions.
6 There is a backwards-incompatible API change for customized raw
7 definitions, see <http://htmlpurifier.org/docs/enduser-customize.html#optimized>
8 for details.