repo.or.cz
/
htmlpurifier.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
Make URI parsing algorithm more strict.
2013-04-16
Edward Z
.
Y
ang
Ma
k
e
U
R
I parsing a
l
gorithm more strict
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2013-02-21
E
d
wa
r
d Z
.
Yang
Fix
N
EWS
e
ntry
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2013-02-18
Ed
w
a
r
d Z
.
Ya
n
g
R
e
lease 4
.
5
.
0
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2013-02-17
Edward Z
.
Yang
Add
%Core
.
Disab
l
eExcludes
d
ir
e
ctive
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-27
Edward Z
.
Yang
Use SHA-1 instead
o
f MD
5
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-27
Edward Z
.
Y
a
ng
Blacklist more
t
ags from R
e
moveE
m
pty
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-27
Edward Z
.
Yang
Clean
u
p
a
fter data validation
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-27
Edward Z
.
Ya
n
g
Do
c
h
e
cks a
g
ainst ico
n
v
A
v
a
ilabl
e
because PHP 5
.
4 has
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-11
Edward Z
.
Yang
Comment for bug
t
h
at needs to get fixed
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-10-11
Edward Z
.
Yang
CSS properties
page-bre
a
k
-*
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-07-30
Edw
a
rd Z
.
Yang
Fix bug
w
ith non-lo
w
er cas
e
color
n
a
mes in HT
M
L
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-07-27
Ed
w
a
rd Z
.
Yang
Permit
u
n
d
er
s
co
r
es
in font-famili
e
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-06-16
Edward Z
.
Ya
n
g
More
s
upport f
o
r whit
e
-space
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-06-02
Edwa
r
d
Z
.
Yan
g
Don't
lowe
r
-ca
s
e
compon
e
nts of background
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-05-26
Edward Z
.
Y
a
n
g
Support
f
or i
n
line-block
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-05-15
E
d
ward
Z
.
Yang
Fix in
A
ttrTra
n
s
form_No
f
o
llow
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-05-02
Ed
w
a
rd
Z
.
Yang
Use prepend for autoloadin
g
o
n
PHP
5
.
3+
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-04-27
Edwar
d
Z
.
Yang
Support for safe exter
n
al scr
i
pts
v
ia
explic
i
t whitelis
t
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-03-17
Edward Z
.
Yang
Fix problem
w
here stacked Attr
T
r
ansforms clobber e
a
ch
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-03-02
Ed
w
ard Z
.
Yang
A
c
tually make URI
.
D
i
sableResources do something
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-02-18
Edwar
d
Z
.
Yang
Bugfix: _blank
not
blank
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-25
Edwa
r
d Z
.
Yang
Update N
E
W
S
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-19
Edward Z
.
Y
ang
Release 4
.
4
.
0
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
Edward Z
.
Yang
M
a
k
e all o
f
the tests work o
n
all PHP versio
n
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
Edw
a
rd Z
.
Yang
A
v
oid doing stupidly cleve
r
reflection tricks that
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-18
Edward Z
.
Yan
g
Modernize some of the testing f
a
cilities
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-17
Edward Z
.
Yang
Tigh
t
er CSS
s
elector validation
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-06
Edwar
d
Z
.
Yang
Remark ab
o
ut bypa
s
sing hos
t
list
w
ith puny
c
ode
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-06
Edward
Z
.
Yang
O
p
tional supp
o
rt for
IDNA
s
with PEAR Net_IDNA2
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2012-01-03
Edward Z
.
Y
a
ng
Remo
v
e
P
E
A
RSax
3
lexer
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-30
Edward Z
.
Yang
Make forms
work for transitional doctypes
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-27
Edward Z
.
Yan
g
Remove
inscrut
a
bl
e
TODO, opt
i
onalize another
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-27
Edward Z
.
Yang
Ad
d
note ab
o
u
t
superse
d
ing mo
d
ule
s
in TO
D
O
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
E
d
wa
r
d Z
.
Yang
Bump minor version num
b
er t
o
4
.
4
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yan
g
Ad
d
test for inv
a
lid SafeI
f
rame usage
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yang
Ad
d
more attributions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
E
dward Z
.
Yang
Implement %HTML
.
All
o
wedComme
n
ts and %HTML
.
Allowed
C
om
m
e
ntsRegex
p
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yang
Fix brok
e
n table content mode
l
, easily seen in XHTML1
.
1
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
Edward Z
.
Yang
Properly handle nested sub
l
ists by folding
in
t
o p
r
evious
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-26
E
dwar
d
Z
.
Yang
Implement %HTML
.
Ta
r
ge
t
Blank
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edwa
r
d Z
.
Ya
n
g
Add i
s
Benign and g
e
t
D
efaultS
c
heme methods
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
E
d
ward
Z
.
Yang
Add a little bit of d
o
c
ument
a
tion about contexts for
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Ed
w
ard Z
.
Y
ang
Core
.
E
s
capeNonASCIICharacters now always wo
r
ks, even
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edward Z
.
Y
ang
A
d
d
support for sc
o
pe at
t
r
i
b
u
te on t
d
and th
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Ed
w
ard Z
.
Yang
A
d
d one more test for SPL aut
o
load
d
efau
l
ts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-25
Edw
a
r
d
Z
.
Yang
Fix i
c
onv
t
r
u
n
cation bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-18
Edward
Z
.
Y
ang
Remove
spuriou
s
a
b
stract d
e
fini
t
ion; PHP 5
.
4 doesn
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-12-18
Edward Z
.
Yang
Don't unset parser variable
;
p
l
ays po
o
rl
y
with
s
eriali
z
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edward
Z
.
Yang
Typofix
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edward Z
.
Yang
Don't
a
d
d
nof
o
l
l
ow
f
o
r matching hos
t
s, generaliz
e
thi
s
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edwar
d
Z
.
Yang
Update
INSTALL to avoid missi
n
g
config snafu, u
p
date
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-08-24
Edward Z
.
Y
a
ng
Do not dupl
i
cate
nofollow attribut
e
in t
r
ansform
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-19
Edward Z
.
Yang
Explicitly initiali
z
e anonModule to null
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-10
Edward Z
.
Yan
g
URI
.
Munge munges htt
p
s to
h
ttp URIs
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-04-10
Edwa
r
d
Z
.
Yang
C
o
l
or
k
e
ywords now ca
s
e-
i
ns
e
nsitive
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edw
a
rd Z
.
Yan
g
Re
l
ea
s
e 4
.
3
.
0
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Ed
w
ar
d
Z
.
Yang
Fix CSS URL innerHTML/cssTex
t
e
scap
i
ng bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edward Z
.
Yang
Protect against
fo
n
t family innerHTML
/
c
s
sText attacks
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edwa
r
d Z
.
Yang
Fix Internet Expl
o
r
er innerHTML bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-24
E
d
ward Z
.
Yang
Implement
C
SS
.
AllowedFonts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-22
Edw
a
rd Z
.
Ya
n
g
Don't autoclose if no parents support th
e
tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-21
Edw
a
rd Z
.
Yang
Safet
y
up
d
ate for n
e
ste
d
u
l
test
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-17
Edw
a
rd Z
.
Yang
Fix E_
N
OTICE from indexing into emp
t
y
string
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-02-27
Edward Z
.
Y
ang
Fix missi
n
g numeric entiti
e
s
(sho
w
s up w
h
en DirectLexing)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-25
Edwa
r
d Z
.
Yang
Dra
m
atically r
e
w
r
ite n
u
ll
host URI handling
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-22
Edward Z
.
Yang
Fix embedd
i
ng flash o
n
no
n
-IE
b
rowsers
a
nd
allow more
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-14
E
dward Z
.
Yang
B
u
m
p
ve
r
sion num
b
er
for Cach
e
.
Serializer
P
ermissio
n
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-13
Edward Z
.
Yang
C
h
e
c
k that a
r
gv is set before operating on
i
t
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-31
E
d
w
ard Z
.
Yang
Fix bad interaction
b
etween bootstrap autoload
e
r
a
nd
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-30
Edward Z
.
Yang
Fix two bu
g
s w
i
th caching of custom
i
zed raw definitions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-21
Edward Z
.
Yang
Up
d
a
t
e
PHPT
ins
t
ructions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward Z
.
Yang
A
d
d i
n
itial im
p
lement
a
tion of CSS
.
Trusted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Ed
w
ard Z
.
Y
ang
Add sanity check again
s
t ze1_compatibility_
m
o
de
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward Z
.
Yang
Fix inco
r
rect
PEARSax
3
t
e
st ass
e
rtion
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-29
Edward
Z
.
Ya
n
g
Che
c
k if sche
m
a
.
ser wa
s
corrupted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-28
Edw
a
r
d Z
.
Yang
Fix removal of
i
d with Dire
c
t
L
e
x
b
y preserving armor
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
E
dward Z
.
Yang
E
sc
a
pe CDAT
A
before han
d
lin
g
conditional comments
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Yang
I
m
plement
HTML
.
Nofo
l
lo
w
for ext
e
rn
a
l links
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edw
a
rd Z
.
Yang
Make
IE conditio
n
al commen
t
matchin
g
ungree
d
y
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edward Z
.
Yang
R
e
le
a
se
4
.
2
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
E
d
w
a
rd Z
.
Yan
g
Rename newline
normalization
d
irective to
s
omething
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edward
Z
.
Yan
g
Shift to 4
.
2
.
0
relea
s
e cycle
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Y
ang
Add support
fo
r
file:// URI scheme
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward
Z
.
Y
a
ng
U
p
date TO
D
O
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yang
Impl
e
ment
H
TML
.
Fl
a
shAllo
w
FullScreen
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
E
dw
a
r
d
Z
.
Yang
Ad
d
%
C
SS
.
ForbiddenProperties directive
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward Z
.
Y
ang
A
d
d d
o
cume
n
tatio
n
a
bo
u
t configuration directi
v
e
types
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward Z
.
Y
a
ng
Rewo
r
d docu
m
entation t
o
be clearer, and gi
v
e
warning
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-08-27
Ed
w
ard Z
.
Yang
Fix Mac Snow
Leo
p
ard
AP
C
bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edwar
d
Z
.
Yang
Tighten up igno
r
e spec
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edw
a
rd Z
.
Y
ang
Actua
l
ly make URI
.
DisableResou
r
ces do something
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-21
E
dwa
r
d Z
.
Y
ang
Add
e
d %Cor
e
.
RemoveProce
s
singInst
r
u
ctions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-18
Edward
Z
.
Yan
g
Fix i
m
p
r
oper handling of IE con
d
itional com
m
ents
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Ed
w
ard Z
.
Yang
Release 4
.
1
.
1
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edw
a
rd
Z
.
Ya
n
g
Fix undefined
i
nd
e
x
warnings in maintenance scripts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edward Z
.
Ya
n
g
Fix bug in p
a
rsi
n
g sin
g
l
e
a
t
tribu
t
e wit
h
entities
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edwa
r
d Z
.
Ya
n
g
Rewrite CSS url() an
d
font-f
a
m
i
ly out
p
ut lo
g
ic
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edw
a
r
d
Z
.
Yang
M
a
k
e
t
est script less chat
t
y w
h
en log_errors is
on
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edwa
r
d
Z
.
Yang
Remov
e
shebang and +x from
test script
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-18
Edward Z
.
Yang
F
ix
i
nfini
t
e lo
o
p
i
nvolvi
n
g w
r
appi
n
g formedness
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
next