[ANN] loofah 2.4.0 released
Mike Dalessio <[email protected]> Mon, 25 Nov 2019 13:50:01 -0500
| Newsgroups | gmane.comp.lang.ruby.general |
|---|---|
| Message-ID | <CAGJbjKZq8AWwtov+=oZ8cp-CWhJvxQeBz38eKq+Y3ijVRv2g_Q@mail.gmail.com> |
--===============1132096397== Content-Type: multipart/alternative; boundary="000000000000d1654b0598303b18" --000000000000d1654b0598303b18 Content-Type: text/plain; charset="UTF-8" Loofah version 2.4.0 has been released. This is a *feature* release and is *not* security-related. - https://github.com/flavorjones/loofah - Docs: http://rubydoc.info/github/flavorjones/loofah/master/frames - Mailing list: [email protected] <https://groups.google.com/forum/#!forum/loofah-talk> Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah excels at HTML sanitization (XSS prevention). It includes some nice HTML sanitizers, which are based on HTML5lib's safelist, so it most likely won't make your codes less secure. (These statements have not been evaluated by Netexperts.) ActiveRecord extensions for sanitization are available in the loofah-activerecord gem <https://github.com/flavorjones/loofah-activerecord> . --- *## 2.4.0 / 2019-11-25* *### Features* - Allow CSS property max-width [#175] (Thanks, @bchaney!) - Allow CSS sizes expressed in rem [#176, #177] - Add frozen_string_literal: true magic comment to all lib files. [#118] --000000000000d1654b0598303b18 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Loofah version 2.4.0 has been released.<div><br></div><div= >This is a <b>feature</b> release and is <b>not</b> security-related.</div>= <div><br></div><div><ul style=3D"box-sizing:border-box;padding:0px 0px 0px = 2em;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font-size:13= .3333px;margin-top:0px"><li style=3D"box-sizing:border-box"><a href=3D"http= s://github.com/flavorjones/loofah" style=3D"box-sizing:border-box;backgroun= d-color:transparent;color:rgb(64,120,192);text-decoration-line:none">https:= //github.com/flavorjones/loofah</a></li><li style=3D"box-sizing:border-box"= >Docs:=C2=A0<a href=3D"http://rubydoc.info/github/flavorjones/loofah/master= /frames" style=3D"box-sizing:border-box;background-color:transparent;color:= rgb(64,120,192);text-decoration-line:none">http://rubydoc.info/github/flavo= rjones/loofah/master/frames</a></li><li style=3D"box-sizing:border-box">Mai= ling list:=C2=A0<a href=3D"https://groups.google.com/forum/#!forum/loofah-t= alk" style=3D"box-sizing:border-box;background-color:transparent;color:rgb(= 64,120,192);text-decoration-line:none">[email protected]</a></li= ></ul><p style=3D"box-sizing:border-box;margin-top:0px;margin-bottom:16px;c= olor:rgb(0,0,0);font-family:sans-serif;font-size:13.3333px">Loofah is a gen= eral library for manipulating and transforming HTML/XML documents and fragm= ents, built on top of Nokogiri.</p><p style=3D"box-sizing:border-box;margin= -top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font-si= ze:13.3333px">Loofah excels at HTML sanitization (XSS prevention). It inclu= des some nice HTML sanitizers, which are based on HTML5lib's safelist, = so it most likely won't make your codes less secure. (These statements = have not been evaluated by Netexperts.)</p><p style=3D"box-sizing:border-bo= x;margin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif= ;font-size:13.3333px">ActiveRecord extensions for sanitization are availabl= e in the=C2=A0<a href=3D"https://github.com/flavorjones/loofah-activerecord= " style=3D"box-sizing:border-box;background-color:transparent;color:rgb(64,= 120,192);text-decoration-line:none"><code style=3D"box-sizing:border-box;fo= nt-family:Consolas,"Liberation Mono",Menlo,Courier,monospace;font= -size:11.3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,0.= 04);border-radius:3px">loofah-activerecord</code>=C2=A0gem</a>.</p><p style= =3D"box-sizing:border-box;margin-top:0px;margin-bottom:16px"><span style=3D= "box-sizing:border-box">---</span></p><p style=3D"box-sizing:border-box;mar= gin-top:0px;margin-bottom:16px"><strong><font color=3D"#000000" face=3D"san= s-serif"><span style=3D"font-size:13.3333px;box-sizing:border-box">## 2.4.0= / 2019-11-25</span></font></strong><br></p><p style=3D"box-sizing:border-b= ox;margin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-seri= f;font-size:13.3333px"><strong style=3D"box-sizing:border-box">### Features= </strong></p><ul style=3D"box-sizing:border-box;padding:0px 0px 0px 2em;mar= gin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font= -size:13.3333px"><li style=3D"box-sizing:border-box">Allow CSS property=C2= =A0<code style=3D"box-sizing:border-box;font-family:Consolas,"Liberati= on Mono",Menlo,Courier,monospace;font-size:11.3333px;padding:0.2em 0px= ;margin:0px;background-color:rgba(0,0,0,0.04);border-radius:3px">max-width<= /code>=C2=A0[#175] (Thanks, @bchaney!)</li><li style=3D"box-sizing:border-b= ox">Allow CSS sizes expressed in=C2=A0<code style=3D"box-sizing:border-box;= font-family:Consolas,"Liberation Mono",Menlo,Courier,monospace;fo= nt-size:11.3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,= 0.04);border-radius:3px">rem</code>=C2=A0[#176, #177]</li><li style=3D"box-= sizing:border-box">Add=C2=A0<code style=3D"box-sizing:border-box;font-famil= y:Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:11= .3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,0.04);bord= er-radius:3px">frozen_string_literal: true</code>=C2=A0magic comment to all= =C2=A0<code style=3D"box-sizing:border-box;font-family:Consolas,"Liber= ation Mono",Menlo,Courier,monospace;font-size:11.3333px;padding:0.2em = 0px;margin:0px;background-color:rgba(0,0,0,0.04);border-radius:3px">lib</co= de>=C2=A0files. [#118]</li></ul></div></div> --000000000000d1654b0598303b18-- --===============1132096397== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Unsubscribe: <mailto:[email protected]?subject=unsubscribe> <http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk> --===============1132096397==--