repo.or.cz
/
htmlpurifier
/
bfroehle.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
Fix CSS URL innerHTML/cssText escaping bug.
2011-03-27
E
dwar
d
Z
.
Yan
g
F
ix
CSS URL innerHTML/
c
ssText
e
sca
p
ing bu
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
Edwar
d
Z
.
Yang
Protect against font fami
l
y inner
H
TML/c
s
s
T
ext attacks
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-27
E
dward
Z
.
Y
ang
Fix
Internet Explorer
innerHT
M
L bu
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-24
E
dward Z
.
Yang
Imple
m
ent CSS
.
Allow
e
dFo
n
ts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-22
Edward Z
.
Ya
n
g
Don'
t
a
ut
o
close if no parents
s
upport
t
he tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-21
E
d
ward Z
.
Yang
S
afety update for ne
s
t
ed
u
l test
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-03-17
E
dward Z
.
Ya
n
g
F
i
x
E_NOTI
C
E
from
i
ndexi
n
g into empt
y
string
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-02-27
Edward Z
.
Yang
Fix missing numeric entities (shows up when DirectL
e
xi
n
g)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-25
Edward Z
.
Yang
Dramatically r
e
write null host URI handling
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-22
Edw
a
rd Z
.
Yang
Fix
emb
e
dding flash on non
-
IE
browser
s
a
nd allow m
o
re
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-14
E
d
ward Z
.
Ya
n
g
Bump
v
er
s
i
o
n numbe
r
for Cac
h
e
.
SerializerP
e
rmissions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2011-01-13
Edw
a
rd Z
.
Yang
Check
th
a
t
a
rgv is set b
e
f
o
r
e
o
perat
i
ng o
n
it
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-31
Edward Z
.
Yang
Fix
bad
i
nteraction
betwee
n
b
ootstrap autoload
e
r and
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-12-30
Edwar
d
Z
.
Yang
Fix two b
u
gs with
caching of custo
m
ized raw definit
i
o
n
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-21
Edwar
d
Z
.
Y
ang
Update PHPT instructions
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edward
Z
.
Yang
Add initial
i
mplementatio
n
of CSS
.
Trust
e
d
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
E
dw
a
rd Z
.
Ya
n
g
Add sanity ch
e
ck agains
t
ze1_compa
t
ib
i
li
t
y
_
mod
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-11-12
Edwar
d
Z
.
Yang
Fix incorrect PEARSa
x
3
t
est assertion
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-29
Edward Z
.
Yang
Check if schem
a
.
ser wa
s
corrupted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-10-28
E
d
wa
r
d Z
.
Yan
g
Fix rem
o
val of id w
i
t
h
Di
r
ectLex
b
y preserving armor
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Yan
g
E
sc
a
pe CDATA before handling conditional co
m
ments
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edward Z
.
Yang
Implement HTML
.
Nofo
l
low for external
l
inks
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-28
Edwar
d
Z
.
Y
a
n
g
Make
IE
c
ondi
t
ional
comment matching ungreedy
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edward Z
.
Yang
Release 4
.
2
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
Edw
a
r
d
Z
.
Yang
Rename newline normaliza
t
i
o
n di
r
ective
t
o
s
omething
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-15
E
dwa
r
d Z
.
Yang
Shift to
4
.
2
.
0
r
elease cycle
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Yang
Add
s
uppo
r
t for
fi
l
e:/
/
UR
I
scheme
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
Edward Z
.
Y
a
ng
Update TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-09
E
dward Z
.
Yang
Implemen
t
HTML
.
Flash
A
l
l
o
wFullScr
e
en
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edward Z
.
Yang
Add %CSS
.
Forbid
d
e
n
Properties directi
v
e
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Ed
w
ard Z
.
Ya
n
g
A
dd
documentation about configu
r
ation dire
c
tive t
y
pes
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-09-04
Edwar
d
Z
.
Y
ang
Reword d
o
cume
n
tation to be clearer, and give warning
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-08-27
Edwar
d
Z
.
Ya
n
g
Fix Mac Snow
L
eopard APC bug
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Ed
w
ard Z
.
Yang
T
i
ghten up i
g
n
ore spe
c
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-30
Edward Z
.
Y
a
ng
Actual
l
y
make URI
.
Disable
R
eso
u
rces d
o
s
omet
h
i
n
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-21
Edwa
r
d
Z
.
Y
a
n
g
Added %Cor
e
.
RemoveProce
s
singInst
r
uction
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-18
Edward Z
.
Yang
F
i
x improper
h
andling of IE condition
a
l
c
omme
n
ts
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Ed
w
ard
Z
.
Yan
g
Release 4
.
1
.
1
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Ed
w
ard Z
.
Yang
Fix
undefined index warni
n
gs
i
n maint
e
nance
script
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edward Z
.
Yang
Fix
bug in p
a
rsing single a
t
tribute with entiti
e
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-06-01
Edward Z
.
Ya
n
g
Rewrite CSS ur
l
()
a
n
d fo
n
t-family
o
utput logic
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Ed
w
ard Z
.
Yang
M
ake test
s
cript le
s
s
chatty wh
e
n log
_
errors is on
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-21
Edward Z
.
Yang
Remove
s
heban
g
a
n
d +x
from test script
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-18
Edward Z
.
Yang
Fix infin
i
t
e
loop involvin
g
wrapping formedness
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-05
E
d
w
a
r
d
Z
.
Yang
Fix bug in backgro
u
nd-positio
n
with center keyword
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-05-04
E
dwar
d
Z
.
Y
ang
E
mit errors
w
hen body
i
s extr
a
c
ted
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edward Z
.
Y
a
ng
Rele
a
se 4
.
1
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Edward
Z
.
Yang
M
u
t
e
STRICT erro
r
s from CSS
T
i
d
y
and don
'
t
r
u
n P
E
ARSax3
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-26
Ed
w
ar
d
Z
.
Yang
Always qu
o
te the contents of url
(
) in CSS
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-04-17
Edward Z
.
Yan
g
Remove +x bi
t
from
R
emo
v
eSpansWithoutAttributes
.
php
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-30
Edward Z
.
Yang
Support for fl
a
shvars i
n
H
T
ML
.
Safe
E
mbed
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-10
Edward Z
.
Yang
Handle <ol><ol> proper
l
y by adding missin
g
<li> tag
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-09
Edward Z
.
Yang
Impr
o
ve handling of m
a
lforme
d
object
p
a
rameters
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
E
d
wa
r
d
Z
.
Yang
Remove call-time
pass-by-reference
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edward Z
.
Yang
I
mpl
e
ment In
t
ernet
E
x
p
lorer
compatib
i
lity code
for
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
Edward Z
.
Y
a
ng
T
r
unca
t
e
a
lt text from src if it's t
o
o long
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
E
dward Z
.
Yang
Support flashvars
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-08
E
d
ward Z
.
Yang
Implement d
a
ta URI scheme
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-03-07
E
dward Z
.
Yang
Support Y
o
u
Tube s
l
ideshow em
b
eddin
g
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-27
Edward Z
.
Yang
Fix extant
b
roke
n
PEARSax3 parsing patter
n
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-27
Edward Z
.
Yang
Manuall
y
w
o
r
k
around
P
EARS
a
x3 E_STR
I
C
T
e
rrors
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-15
Ed
w
ard Z
.
Yang
Ad
d
sh
e
bang line
to tests
i
n
d
ex script
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2010-02-15
Edward Z
.
Yang
F
ix autoparag
r
aph bug with
n
o
n
-inline
e
lement
s
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward Z
.
Yang
Update TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward
Z
.
Yang
Suppo
r
t proprietary
h
eight
attribute on table
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-08-28
Edward Z
.
Yang
Gr
a
cefu
l
ly de
a
l wi
t
h null injectors
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-15
E
dw
a
r
d
Z
.
Y
an
g
Upd
a
t
e
TODO
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-10
Ed
w
a
rd Z
.
Yang
Release
P
horum m
o
dule 4
.
0
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-10
Edward Z
.
Y
a
ng
Add
4
.
1
.
0
r
el
e
a
s
e
N
EWS
e
ntry
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-09
Edward Z
.
Yang
Add do
x
ygen d
o
c scripts, and fix pa
c
kage
.
php
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
Edwar
d
Z
.
Y
ang
Relea
s
e
4
.
0
.
0
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
Edwar
d
Z
.
Yang
Up
d
ate configuration
sc
a
nner
to parse new forma
t
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-08
E
d
w
ard
Z
.
Yan
g
Make extractB
o
dy n
o
t terminate prematurely on first
.
.
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-07
Edwar
d
Z
.
Yang
Make
%
URI
.
Munge respect %URI
.
Host (don't mun
g
e)
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree
2009-07-02
Edward Z
.
Yang
XHTML 2 is dead
.
Lo
n
g
live XHT
M
L
2
.
Signed-off-by: Edward Z. Yang <
ezyang@mit.edu
>
commit
|
commitdiff
|
tree