repo.or.cz
/
htmlpurifier.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
Fix CSS URL innerHTML/cssText escaping bug.
2011-03-27
Edward Z
.
Ya
n
g
Fix CSS UR
L
innerHTML/cssTex
t
e
s
ca
p
ing bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edward Z
.
Yan
g
Protect aga
i
nst font famil
y
i
nnerHTML/cssText attacks
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edward
Z
.
Yang
Fix In
t
ernet
E
xplorer inne
r
HTML bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-24
E
dward Z
.
Yang
I
m
p
lem
e
nt C
S
S
.
AllowedFonts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-22
Edward Z
.
Yang
Don't a
u
t
o
clos
e
if no parents support the tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-21
Ed
w
a
r
d Z
.
Yang
Safety update
f
or nested ul
test
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-17
Edward Z
.
Yang
Fix
E
_NOTICE from
i
ndexin
g
into empty str
i
ng
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-02-27
Edward Z
.
Yang
Fix
m
issing numeric entities (s
h
o
w
s up w
h
e
n DirectL
e
xing)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-25
E
d
war
d
Z
.
Yang
Dramatically rewrite n
u
ll h
o
st URI handling
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-22
Edward Z
.
Y
ang
Fix embeddin
g
flash on non-IE bro
w
sers and all
o
w more
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-14
Edward
Z
.
Ya
n
g
B
um
p
version number
f
or Cache
.
SerializerPermissions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-13
E
d
w
ard Z
.
Yang
Check that
a
rgv is s
e
t before operating on it
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-31
Edward
Z
.
Yang
Fi
x
bad interact
i
o
n
between
bootstrap
auto
l
oader and
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-30
Edward Z
.
Ya
n
g
Fix two bugs with caching of cust
o
mized raw def
i
nition
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-21
Edward
Z
.
Yang
Update PHPT instr
u
ctions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
E
dward Z
.
Yang
Add initial im
p
lementation of CSS
.
Trusted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward Z
.
Ya
n
g
Add s
a
n
i
ty
c
h
eck aga
i
nst ze
1
_co
m
patibil
i
ty_mode
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edw
a
r
d
Z
.
Yang
Fix i
n
co
r
rect PE
A
RSa
x
3 t
e
st assertio
n
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-29
Edward Z
.
Y
a
ng
Check if schema
.
ser wa
s
corrupted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-28
Edward Z
.
Yang
Fix removal
of id with
D
irectLex
b
y pre
s
ervin
g
a
rmo
r
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Yang
Escape CDATA b
e
fore handling
conditiona
l
co
m
ments
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edw
a
rd Z
.
Yang
Implement
H
TML
.
N
ofollow for external links
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward
Z
.
Y
a
ng
Make
IE conditio
n
al com
m
ent matc
h
i
n
g ungreed
y
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
E
dwar
d
Z
.
Y
ang
Rele
a
se 4
.
2
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Ed
w
ar
d
Z
.
Y
a
n
g
Rename newline
normalization directive to
something
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edwa
r
d Z
.
Y
an
g
Shift
to 4
.
2
.
0 release
c
ycle
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yan
g
Add support
for
file://
U
R
I scheme
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Y
a
ng
Update
T
O
DO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yang
Implement HTML
.
FlashAllowFull
S
cree
n
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward Z
.
Yang
Add
%CSS
.
F
orbiddenPrope
r
tie
s
directive
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward
Z
.
Y
a
ng
Add documentatio
n
a
b
o
ut con
f
igurati
o
n
d
ire
c
tive types
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward Z
.
Yan
g
Rew
o
r
d docum
e
ntation to be clearer,
a
nd give warni
n
g
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-08-27
Edward Z
.
Yang
Fix M
a
c Snow
Leopard AP
C
bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edwa
r
d Z
.
Yang
Ti
g
hten up ign
o
re spec
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edw
a
rd
Z
.
Yang
A
c
tually make URI
.
Disabl
e
Re
s
o
u
rces do something
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-21
Edward Z
.
Yang
Ad
d
ed %Core
.
RemoveProce
s
singI
n
structions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-18
Edward Z
.
Yang
Fi
x
impr
o
per
h
and
l
ing of IE condit
i
o
nal comments
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edward Z
.
Ya
n
g
Release 4
.
1
.
1
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edw
a
rd Z
.
Yang
Fix undefined i
n
d
ex warnings in
m
a
i
ntenance scripts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edwa
r
d Z
.
Y
a
ng
Fix bu
g
in parsing sing
l
e attri
b
ute
wi
t
h entities
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edw
a
rd Z
.
Y
ang
Rewrite CSS
url() and font-fa
m
ily output logic
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edward Z
.
Yang
M
a
ke
test script less chatty whe
n
log_errors
i
s
o
n
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edward Z
.
Yang
Re
m
ove she
b
ang and +x from te
s
t script
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-18
Edward
Z
.
Y
a
n
g
Fix inf
i
nite l
o
op inv
o
lving wrapp
i
n
g formedness
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-05
E
d
w
ard Z
.
Yang
Fix bu
g
in backgr
o
un
d
-
po
s
ition with
center keyword
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-04
Edwa
r
d Z
.
Yang
E
mit errors when body is extracted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edw
a
rd Z
.
Yang
Re
l
ease 4
.
1
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edw
a
rd Z
.
Yang
Mute STRICT err
o
rs from CSSTid
y
and don'
t
run P
E
ARSax3
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edward Z
.
Yang
A
lwa
y
s quote the
c
ontents of url(
)
in CSS
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-17
Edw
a
rd
Z
.
Y
a
ng
R
e
move +x
b
it from RemoveSpa
n
sW
i
t
houtAttributes
.
php
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-30
E
d
ward Z
.
Yang
Sup
p
o
r
t for fl
a
s
h
vars in HTML
.
S
afeEmbed
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-10
Edward Z
.
Yang
H
a
n
dle <ol>
<
ol>
prop
e
r
l
y by adding missing
<
li> tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-09
Edwa
r
d Z
.
Yang
Improve handlin
g
of m
a
l
forme
d
obj
e
ct para
m
eters
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edward Z
.
Yang
Remo
v
e
c
a
ll-time pass-by-referenc
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edwar
d
Z
.
Yang
Implement Internet
Explo
r
e
r compati
b
ility code for
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edward Z
.
Yang
Truncat
e
a
l
t
text from src if it's too long
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edward Z
.
Y
ang
Support f
l
ashvars
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
E
d
ward Z
.
Yang
Im
p
lement data URI
s
chem
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-07
Edward Z
.
Yang
Support You
T
ube slideshow
e
m
b
edding
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-27
Edward Z
.
Yang
Fix
extan
t
broken PEARSa
x
3 parsi
n
g pa
t
terns
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-27
Edward Z
.
Yang
Manually
w
ork a
r
o
und PEARSa
x
3 E
_
S
T
RICT er
r
ors
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-15
Edwa
r
d Z
.
Yang
Add shebang line to tes
t
s index s
c
ript
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-15
E
d
w
ard
Z
.
Ya
n
g
Fi
x
autoparagraph bug w
i
t
h
non-i
n
line
elements
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward Z
.
Yang
Upda
t
e
TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward Z
.
Y
a
ng
S
u
pport
p
roprietary heigh
t
attribute on
t
a
b
le
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward Z
.
Y
ang
Gra
c
efully deal
wi
t
h null inj
e
ctors
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-15
Edward Z
.
Yang
Update TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-10
Edwa
r
d
Z
.
Y
a
n
g
R
eleas
e
Phorum modu
l
e 4
.
0
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-10
Edward Z
.
Yang
A
d
d 4
.
1
.
0
release NEWS entry
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-09
E
d
ward Z
.
Yang
Add doxyg
e
n doc sc
r
ip
t
s
, a
n
d
fix
package
.
php
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
Edw
a
r
d Z
.
Yang
Release 4
.
0
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
Edwa
r
d Z
.
Y
a
ng
Update co
n
figuration scanner to parse new form
a
t
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
Edward Z
.
Yang
Make
extractBo
d
y not
t
erminate premat
u
r
ely on
f
irst
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-07
Edw
a
rd Z
.
Yang
Make %URI
.
Mu
n
ge respec
t
%UR
I
.
Host
(
don't munge)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-02
Edw
a
rd
Z
.
Yan
g
XHTML
2
is dead
.
Long liv
e
XHTML 2
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree