repo.or.cz
/
htmlpurifier.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
Fix in AttrTransform_Nofollow
2012-05-15
Edward
Z
.
Yan
g
F
ix in AttrTransform_Nof
o
llow
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-05-02
Edwa
r
d Z
.
Yang
U
s
e
prepend for autolo
a
ding
on PHP 5
.
3+
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-04-27
Edward Z
.
Yang
Suppo
r
t for safe exte
r
nal
s
cript
s
via explicit
whitelist
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-03-17
Edward
Z
.
Yang
Fix pro
b
l
e
m
where stacked AttrTransforms clobber each
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-03-16
Benjamin Steininger
Add
c
omposer
.
json
f
i
l
e fo
r
easy install
v
ia composer
.
commit
|
commitdiff
|
tree
2012-03-02
Edward Z
.
Y
ang
Actually mak
e
URI
.
D
i
sable
R
es
o
urces do somet
h
ing
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-02-18
Edward Z
.
Y
a
ng
B
u
gfix:
_
blank not
blank
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-25
Edwa
r
d
Z
.
Y
ang
Update NEWS
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-19
Edward Z
.
Yan
g
Rel
e
ase 4
.
4
.
0
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
Edward Z
.
Yang
Make all of
t
he tests wor
k
on all PHP
versions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
Edwar
d
Z
.
Y
ang
Avoi
d
d
o
ing stup
i
dly clever re
f
lection tricks th
a
t
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
E
dward Z
.
Ya
n
g
M
oder
n
ize some of the te
s
t
i
ng facili
t
i
es
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-17
Edw
a
rd
Z
.
Yang
Tighter CSS sele
c
tor validation
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-06
Ed
w
ard Z
.
Yan
g
R
e
mark about
bypassing
h
ost list wi
t
h punyco
d
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-06
E
dward Z
.
Yang
Opt
i
onal support for IDNAs w
i
th PEAR Net_
I
DNA2
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-03
Edward Z
.
Yang
Remove PEARSax3 lexe
r
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-30
Edward Z
.
Y
a
n
g
Make
f
orms work for transit
i
onal doctypes
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-27
Edward Z
.
Yang
Re
m
ove inscru
t
able
T
O
D
O, o
p
t
i
o
n
alize
a
no
t
her
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-27
Edward Z
.
Yang
Add note about supe
r
seding m
o
dules
i
n TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edw
a
rd Z
.
Y
a
n
g
Bu
m
p mino
r
ver
s
ion n
u
m
b
e
r
t
o 4
.
4
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edwa
r
d Z
.
Y
a
n
g
Add test
f
or invali
d
S
a
feIframe
u
sa
g
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Bradley
M
.
Froehle
Implem
e
n
t
Ifr
a
me
m
odule, and pr
o
vide %HTML
.
SafeIframe
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
E
d
ward
Z
.
Y
ang
Add m
o
re attri
b
utions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yan
g
Implement
%
HTML
.
AllowedComments and %HTML
.
Allow
e
d
C
ommen
t
sRegexp
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward
Z
.
Yang
Fix
broken table con
t
ent mod
e
l, ea
s
ily seen in
XHTML1
.
1
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edw
a
rd Z
.
Yang
Properly h
a
ndle n
e
sted sublists
b
y fold
i
ng into pre
v
ious
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yang
Im
p
lemen
t
%HTML
.
TargetBla
n
k
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edwa
r
d
Z
.
Yang
A
d
d
i
sB
e
nign and getDefaultScheme met
h
ods
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
E
dward Z
.
Ya
n
g
A
d
d
a
little bit of doc
u
mentation about
contex
t
s f
o
r
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
E
dwar
d
Z
.
Yang
Core
.
EscapeNonASCIIC
h
a
r
acters no
w
a
l
ways work
s
, even
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edward
Z
.
Yang
A
d
d su
p
p
o
r
t
for scope att
r
ibute on td and th
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edwa
r
d Z
.
Yan
g
Add one mo
r
e
test
f
o
r
S
PL autoloa
d
def
a
ult
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edward
Z
.
Y
a
n
g
Fix iconv truncatio
n
bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-18
Edward Z
.
Yang
Remove spurious abstract definiti
o
n; PHP 5
.
4 does
n
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-18
Edward Z
.
Y
ang
D
on't unset parser variabl
e
;
p
la
y
s poorly with seria
l
ize
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
E
d
ward Z
.
Yang
Typo
f
ix
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edward Z
.
Yang
Do
n
'
t
a
dd nofollow
f
o
r
match
i
ng hosts, generalize this
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edw
a
rd Z
.
Y
a
ng
Update INST
A
LL to avoid m
i
ssing config snafu, updat
e
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
E
dward Z
.
Yang
Do
not duplicate n
o
follow
attribute
i
n tran
s
form
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-19
Edw
a
r
d Z
.
Yan
g
Ex
p
lici
t
ly initia
l
ize a
n
o
nModule to null
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-10
Edward Z
.
Ya
n
g
URI
.
Munge
m
ung
e
s https to http UR
I
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-10
Ed
w
ard
Z
.
Yang
Col
o
r keywords now case-inse
n
si
t
ive
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edw
a
rd Z
.
Yang
Release 4
.
3
.
0
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edward Z
.
Yang
Fix CSS U
R
L innerHTML/cssText escaping bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
E
d
ward Z
.
Yang
Protect a
g
ainst
f
on
t
fa
m
ily
i
nnerHTM
L
/
css
T
ext attacks
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edward Z
.
Ya
n
g
F
ix Int
e
rn
e
t Ex
p
lorer innerHTML bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-24
Edwa
r
d
Z
.
Yang
Implement
C
SS
.
Allow
e
dF
o
n
t
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-22
Ed
w
ard
Z
.
Y
a
ng
Don't au
t
oc
l
os
e
if no p
a
rents support the t
a
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-21
E
dward Z
.
Yang
Safety update for
n
e
sted ul
te
s
t
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-17
Edwar
d
Z
.
Yang
Fix E_NOT
I
CE from
inde
x
i
n
g into empty st
r
i
ng
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-02-27
Edward Z
.
Yan
g
F
i
x mis
s
ing numeric en
t
ities (
s
hows up when Di
r
ectLex
i
ng)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-25
Ed
w
ard
Z
.
Yang
Dramatically re
w
r
i
te null host URI handlin
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-22
Edward
Z
.
Y
ang
F
ix emb
e
dding flash on non-IE browser
s
and allow mo
r
e
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-19
M
a
xim Krizhanovsky
Iter
a
tive t
r
aversal of DOM
.
commit
|
commitdiff
|
tree
2011-01-14
Edward
Z
.
Yang
B
u
mp
version number
for Cache
.
Seriali
z
erPermissi
o
ns
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-13
P
e
t
r S
k
oda
Add new Cache
.
Se
r
i
a
lizerPermissions option
.
commit
|
commitdiff
|
tree
2011-01-13
Edward Z
.
Yang
Check t
h
at argv is se
t
before
ope
r
a
t
i
ng on it
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-31
Edw
a
rd Z
.
Y
ang
Fix ba
d
i
n
t
eraction between boot
s
trap
a
u
t
oload
e
r
a
nd
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-30
E
d
ward Z
.
Yang
Fix
t
wo bugs with caching of
c
u
st
o
mized raw de
f
initions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-21
E
d
w
a
rd
Z
.
Yang
Upda
t
e PHPT instructi
o
ns
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward Z
.
Yang
Add
i
nitial imple
m
e
n
tation of CSS
.
Tru
s
ted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
E
d
war
d
Z
.
Yang
Add sanity check against ze1_compatibility_mode
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward Z
.
Yang
Fix incorre
c
t
P
EARSax3 te
s
t assertion
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-29
E
d
ward Z
.
Y
a
n
g
Che
c
k
i
f sche
m
a
.
ser was co
r
rupted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-28
Edw
a
rd Z
.
Yang
Fix
r
emova
l
of id with Direc
t
Lex
by pr
e
serving arm
o
r
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-28
Ni
c
k Pope
Allow non-static autoload methods w/ PHP >= 5
.
2
.
11
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edw
a
rd Z
.
Yang
Escape CDATA be
f
or
e
handling co
n
ditional comments
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Yang
Impl
e
ment HTML
.
N
o
f
o
llow
f
or external links
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Y
a
ng
Mak
e
IE conditional comment matching ungreedy
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edw
a
r
d
Z
.
Yang
Release
4
.
2
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edward Z
.
Yang
R
ename newline
n
ormalization directive t
o
somethi
n
g
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Tomasz M
u
ras
Make newline norma
l
ization optional
.
commit
|
commitdiff
|
tree
2010-09-15
Edward Z
.
Yang
Shift to 4
.
2
.
0 rele
a
se cycle
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Y
a
ng
Add su
p
port fo
r
fi
l
e
:// UR
I
scheme
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yang
Update TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yan
g
Imp
l
ement HTML
.
FlashAllowFu
l
lScre
e
n
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edwa
r
d
Z
.
Y
ang
Add %CSS
.
Forbidd
e
nP
r
operties directive
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward
Z
.
Yan
g
Add doc
u
mentation about configuration dir
e
c
tive types
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
E
dward Z
.
Yang
Rewo
r
d
documentati
o
n to be cl
e
arer
,
and giv
e
warning
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-08-27
Edward Z
.
Yan
g
Fix Mac Snow L
e
opar
d
APC bu
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
E
dward
Z
.
Yang
T
ighte
n
up
ignore sp
e
c
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edward Z
.
Yang
Ac
t
ua
l
ly make URI
.
Di
s
ableR
e
s
o
urces do something
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-21
E
d
ward
Z
.
Y
ang
Added %Core
.
Remov
e
P
roce
s
sing
I
nstr
u
ctio
n
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-18
Edward Z
.
Ya
n
g
Fix improper hand
l
ing of IE conditiona
l
comment
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edw
a
rd Z
.
Yang
Release 4
.
1
.
1
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
E
dw
a
r
d
Z
.
Yang
Fix undefined index
wa
r
nin
g
s in mainten
a
nce scripts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edward Z
.
Yang
Fix bu
g
i
n
pa
r
sing single att
r
ibute with entities
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edw
a
rd Z
.
Yang
Rewrite C
S
S u
r
l()
a
nd fon
t
-family
output logic
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edward Z
.
Yan
g
Make te
s
t
s
c
r
i
p
t le
s
s chatty when
l
og_errors
i
s
on
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Ed
w
ard Z
.
Y
a
n
g
R
e
mov
e
s
h
ebang and +x fr
o
m test script
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-18
Edward
Z
.
Yang
Fi
x
infinite loo
p
involv
i
ng w
r
appin
g
formedness
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-05
Edward
Z
.
Yang
F
i
x
b
ug in background-pos
i
tion
w
i
t
h cente
r
keyword
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-04
Edward
Z
.
Y
a
n
g
Emit
e
r
rors when bo
d
y
is extrac
t
ed
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edward Z
.
Yang
Release 4
.
1
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
E
d
ward Z
.
Ya
n
g
M
ute
STRICT errors from CSSTidy and d
o
n't run PEARSax3
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edward Z
.
Yang
Always quote
t
he conte
n
t
s of
u
rl() i
n
CSS
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-17
Edward Z
.
Yang
Remove +
x
bit
f
r
om
RemoveSpansWithoutA
t
tr
i
butes
.
php
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-30
Edwar
d
Z
.
Yang
Support for flashvars in HTML
.
SafeEmbed
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-10
E
d
ward Z
.
Yang
H
and
l
e <ol><ol
>
p
r
operly by ad
d
ing miss
i
ng
<li>
tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-09
Edward Z
.
Ya
n
g
Impro
v
e h
a
ndling
o
f malformed object parameters
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
next