[ANN] loofah 2.4.0 released

Mike Dalessio <[email protected]> Mon, 25 Nov 2019 13:50:01 -0500
Newsgroups gmane.comp.lang.ruby.general
Message-ID <CAGJbjKZq8AWwtov+=oZ8cp-CWhJvxQeBz38eKq+Y3ijVRv2g_Q@mail.gmail.com>
--===============1132096397==
Content-Type: multipart/alternative; boundary="000000000000d1654b0598303b18"

--000000000000d1654b0598303b18
Content-Type: text/plain; charset="UTF-8"

Loofah version 2.4.0 has been released.

This is a *feature* release and is *not* security-related.


   - https://github.com/flavorjones/loofah
   - Docs: http://rubydoc.info/github/flavorjones/loofah/master/frames
   - Mailing list: [email protected]
   <https://groups.google.com/forum/#!forum/loofah-talk>

Loofah is a general library for manipulating and transforming HTML/XML
documents and fragments, built on top of Nokogiri.

Loofah excels at HTML sanitization (XSS prevention). It includes some nice
HTML sanitizers, which are based on HTML5lib's safelist, so it most likely
won't make your codes less secure. (These statements have not been
evaluated by Netexperts.)

ActiveRecord extensions for sanitization are available in the
loofah-activerecord gem <https://github.com/flavorjones/loofah-activerecord>
.

---

*## 2.4.0 / 2019-11-25*

*### Features*

   - Allow CSS property max-width [#175] (Thanks, @bchaney!)
   - Allow CSS sizes expressed in rem [#176, #177]
   - Add frozen_string_literal: true magic comment to all lib files. [#118]

--000000000000d1654b0598303b18
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Loofah version 2.4.0 has been released.<div><br></div><div=
>This is a <b>feature</b> release and is <b>not</b> security-related.</div>=
<div><br></div><div><ul style=3D"box-sizing:border-box;padding:0px 0px 0px =
2em;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font-size:13=
.3333px;margin-top:0px"><li style=3D"box-sizing:border-box"><a href=3D"http=
s://github.com/flavorjones/loofah" style=3D"box-sizing:border-box;backgroun=
d-color:transparent;color:rgb(64,120,192);text-decoration-line:none">https:=
//github.com/flavorjones/loofah</a></li><li style=3D"box-sizing:border-box"=
>Docs:=C2=A0<a href=3D"http://rubydoc.info/github/flavorjones/loofah/master=
/frames" style=3D"box-sizing:border-box;background-color:transparent;color:=
rgb(64,120,192);text-decoration-line:none">http://rubydoc.info/github/flavo=
rjones/loofah/master/frames</a></li><li style=3D"box-sizing:border-box">Mai=
ling list:=C2=A0<a href=3D"https://groups.google.com/forum/#!forum/loofah-t=
alk" style=3D"box-sizing:border-box;background-color:transparent;color:rgb(=
64,120,192);text-decoration-line:none">[email protected]</a></li=
></ul><p style=3D"box-sizing:border-box;margin-top:0px;margin-bottom:16px;c=
olor:rgb(0,0,0);font-family:sans-serif;font-size:13.3333px">Loofah is a gen=
eral library for manipulating and transforming HTML/XML documents and fragm=
ents, built on top of Nokogiri.</p><p style=3D"box-sizing:border-box;margin=
-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font-si=
ze:13.3333px">Loofah excels at HTML sanitization (XSS prevention). It inclu=
des some nice HTML sanitizers, which are based on HTML5lib&#39;s safelist, =
so it most likely won&#39;t make your codes less secure. (These statements =
have not been evaluated by Netexperts.)</p><p style=3D"box-sizing:border-bo=
x;margin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif=
;font-size:13.3333px">ActiveRecord extensions for sanitization are availabl=
e in the=C2=A0<a href=3D"https://github.com/flavorjones/loofah-activerecord=
" style=3D"box-sizing:border-box;background-color:transparent;color:rgb(64,=
120,192);text-decoration-line:none"><code style=3D"box-sizing:border-box;fo=
nt-family:Consolas,&quot;Liberation Mono&quot;,Menlo,Courier,monospace;font=
-size:11.3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,0.=
04);border-radius:3px">loofah-activerecord</code>=C2=A0gem</a>.</p><p style=
=3D"box-sizing:border-box;margin-top:0px;margin-bottom:16px"><span style=3D=
"box-sizing:border-box">---</span></p><p style=3D"box-sizing:border-box;mar=
gin-top:0px;margin-bottom:16px"><strong><font color=3D"#000000" face=3D"san=
s-serif"><span style=3D"font-size:13.3333px;box-sizing:border-box">## 2.4.0=
 / 2019-11-25</span></font></strong><br></p><p style=3D"box-sizing:border-b=
ox;margin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-seri=
f;font-size:13.3333px"><strong style=3D"box-sizing:border-box">### Features=
</strong></p><ul style=3D"box-sizing:border-box;padding:0px 0px 0px 2em;mar=
gin-top:0px;margin-bottom:16px;color:rgb(0,0,0);font-family:sans-serif;font=
-size:13.3333px"><li style=3D"box-sizing:border-box">Allow CSS property=C2=
=A0<code style=3D"box-sizing:border-box;font-family:Consolas,&quot;Liberati=
on Mono&quot;,Menlo,Courier,monospace;font-size:11.3333px;padding:0.2em 0px=
;margin:0px;background-color:rgba(0,0,0,0.04);border-radius:3px">max-width<=
/code>=C2=A0[#175] (Thanks, @bchaney!)</li><li style=3D"box-sizing:border-b=
ox">Allow CSS sizes expressed in=C2=A0<code style=3D"box-sizing:border-box;=
font-family:Consolas,&quot;Liberation Mono&quot;,Menlo,Courier,monospace;fo=
nt-size:11.3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,=
0.04);border-radius:3px">rem</code>=C2=A0[#176, #177]</li><li style=3D"box-=
sizing:border-box">Add=C2=A0<code style=3D"box-sizing:border-box;font-famil=
y:Consolas,&quot;Liberation Mono&quot;,Menlo,Courier,monospace;font-size:11=
.3333px;padding:0.2em 0px;margin:0px;background-color:rgba(0,0,0,0.04);bord=
er-radius:3px">frozen_string_literal: true</code>=C2=A0magic comment to all=
=C2=A0<code style=3D"box-sizing:border-box;font-family:Consolas,&quot;Liber=
ation Mono&quot;,Menlo,Courier,monospace;font-size:11.3333px;padding:0.2em =
0px;margin:0px;background-color:rgba(0,0,0,0.04);border-radius:3px">lib</co=
de>=C2=A0files. [#118]</li></ul></div></div>

--000000000000d1654b0598303b18--

--===============1132096397==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk>

--===============1132096397==--