Protect against font family innerHTML/cssText attacks.
[htmlpurifier.git] / WHATSNEW
blob9fecbe97dbbdb9bb3104118bc73d13692f5e1670
1 HTML Purifier 4.2.0 is a minor release that implements a number of
2 feature requests accumulated over half a year.  New configuration
3 options include %Core.RemoveProcessingInstructions,
4 %CSS.ForbiddenProperties, %HTML.FlashAllowFullScreen and
5 %Core.NormalizeNewlines.  Additionally,%URI.DisableResources is
6 now functional and file: is an optionally supported URI scheme.
7 There are also some minor bugfixes, usability improvements and
8 documentation updates.