loofah 2.5.0 → 2.6.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of loofah might be problematic. Click here for more details.

Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +54 -47
  3. data/Gemfile +2 -1
  4. data/Rakefile +3 -3
  5. data/lib/loofah.rb +1 -1
  6. data/lib/loofah/html5/safelist.rb +6 -0
  7. metadata +17 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 052a847ba3f873261fa917f028171997ba40b96a5afc4339d98dbfd252905a91
4
- data.tar.gz: 1e348bd51955411df0ed0b170460b30fa150594b8c7a60a40c80de0d485f9e94
3
+ metadata.gz: '0378734abbcf1f374d8d501038180ff4d9492e4282ffe4d6134322dd213fc80b'
4
+ data.tar.gz: 54955254f4179bf55adfc5bdaf3464c8a8f921f6e8e7fc92d9d2588b4fea02b1
5
5
  SHA512:
6
- metadata.gz: 013d4c78bbaedf2b845d33b4bca6c6e483a36b8b774931dea2071e080657e34e2725ee4dffa48db6eb389898640b8b475009ac70efc5e0b319646ae5b7822a85
7
- data.tar.gz: 26742f775c503fbe56255e46963887ae769182574bc6cd7070168c50e92a5ddefa83208ff8930346f6ce7bad74624913221b84f5f3abbc60254c1530595c858e
6
+ metadata.gz: e80d9e87682cbfd18b6f86a10f9928c3b94fb7f123792d8284344cf65a878a1ee8258b408dac8df87791ca5beda99858dfbac6515334d87bc2d98b45cdf17802
7
+ data.tar.gz: da7fd4181e8f829837f0d1458e856b8ace6ed94fa13cdc227bc9432baaff0ec514f894b04b9d00157c6edddcff6a714284bc42a1c878a2ddb90d08b68931dba9
data/CHANGELOG.md CHANGED
@@ -1,30 +1,37 @@
1
1
  # Changelog
2
2
 
3
+ ## 2.6.0 / 2020-06-16
4
+
5
+ ### Features
6
+
7
+ * Allow CSS `border-style` keywords. [[#188](https://github.com/flavorjones/loofah/issues/188)] (Thanks, [@tarcisiozf](https://github.com/tarcisiozf)!)
8
+
9
+
3
10
  ## 2.5.0 / 2020-04-05
4
11
 
5
12
  ### Features
6
13
 
7
- * Allow more CSS length units: "ch", "vw", "vh", "Q", "lh", "vmin", "vmax". [#178] (Thanks, @JuanitoFatas!)
14
+ * Allow more CSS length units: "ch", "vw", "vh", "Q", "lh", "vmin", "vmax". [[#178](https://github.com/flavorjones/loofah/issues/178)] (Thanks, [@JuanitoFatas](https://github.com/JuanitoFatas)!)
8
15
 
9
16
 
10
17
  ### Fixes
11
18
 
12
- * Remove comments from `Loofah::HTML::Document`s that exist outside the `html` element. [#80]
19
+ * Remove comments from `Loofah::HTML::Document`s that exist outside the `html` element. [[#80](https://github.com/flavorjones/loofah/issues/80)]
13
20
 
14
21
 
15
22
  ### Other changes
16
23
 
17
- * Gem metadata being set [#181] (Thanks, @JuanitoFatas!)
18
- * Test files removed from gem file [#180,#166,#159] (Thanks, @JuanitoFatas and @greysteil!)
24
+ * Gem metadata being set [[#181](https://github.com/flavorjones/loofah/issues/181)] (Thanks, [@JuanitoFatas](https://github.com/JuanitoFatas)!)
25
+ * Test files removed from gem file [[#180](https://github.com/flavorjones/loofah/issues/180),[#166](https://github.com/flavorjones/loofah/issues/166),[#159](https://github.com/flavorjones/loofah/issues/159)] (Thanks, [@JuanitoFatas](https://github.com/JuanitoFatas) and [@greysteil](https://github.com/greysteil)!)
19
26
 
20
27
 
21
28
  ## 2.4.0 / 2019-11-25
22
29
 
23
30
  ### Features
24
31
 
25
- * Allow CSS property `max-width` [#175] (Thanks, @bchaney!)
26
- * Allow CSS sizes expressed in `rem` [#176, #177]
27
- * Add `frozen_string_literal: true` magic comment to all `lib` files. [#118]
32
+ * Allow CSS property `max-width` [[#175](https://github.com/flavorjones/loofah/issues/175)] (Thanks, [@bchaney](https://github.com/bchaney)!)
33
+ * Allow CSS sizes expressed in `rem` [[#176](https://github.com/flavorjones/loofah/issues/176), [#177](https://github.com/flavorjones/loofah/issues/177)]
34
+ * Add `frozen_string_literal: true` magic comment to all `lib` files. [[#118](https://github.com/flavorjones/loofah/issues/118)]
28
35
 
29
36
 
30
37
  ## 2.3.1 / 2019-10-22
@@ -33,24 +40,24 @@
33
40
 
34
41
  Address CVE-2019-15587: Unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
35
42
 
36
- This CVE's public notice is at https://github.com/flavorjones/loofah/issues/171
43
+ This CVE's public notice is at [#171](https://github.com/flavorjones/loofah/issues/171)
37
44
 
38
45
 
39
46
  ## 2.3.0 / 2019-09-28
40
47
 
41
48
  ### Features
42
49
 
43
- * Expand set of allowed protocols to include `tel:` and `line:`. [#104, #147]
44
- * Expand set of allowed CSS functions. [related to #122]
45
- * Allow greater precision in shorthand CSS values. [#149] (Thanks, @danfstucky!)
46
- * Allow CSS property `list-style` [#162] (Thanks, @jaredbeck!)
47
- * Allow CSS keywords `thick` and `thin` [#168] (Thanks, @georgeclaghorn!)
48
- * Allow HTML property `contenteditable` [#167] (Thanks, @andreynering!)
50
+ * Expand set of allowed protocols to include `tel:` and `line:`. [[#104](https://github.com/flavorjones/loofah/issues/104), [#147](https://github.com/flavorjones/loofah/issues/147)]
51
+ * Expand set of allowed CSS functions. [related to [#122](https://github.com/flavorjones/loofah/issues/122)]
52
+ * Allow greater precision in shorthand CSS values. [[#149](https://github.com/flavorjones/loofah/issues/149)] (Thanks, [@danfstucky](https://github.com/danfstucky)!)
53
+ * Allow CSS property `list-style` [[#162](https://github.com/flavorjones/loofah/issues/162)] (Thanks, [@jaredbeck](https://github.com/jaredbeck)!)
54
+ * Allow CSS keywords `thick` and `thin` [[#168](https://github.com/flavorjones/loofah/issues/168)] (Thanks, [@georgeclaghorn](https://github.com/georgeclaghorn)!)
55
+ * Allow HTML property `contenteditable` [[#167](https://github.com/flavorjones/loofah/issues/167)] (Thanks, [@andreynering](https://github.com/andreynering)!)
49
56
 
50
57
 
51
58
  ### Bug fixes
52
59
 
53
- * CSS hex values are no longer limited to lowercase hex. Previously uppercase hex were scrubbed. [#165] (Thanks, @asok!)
60
+ * CSS hex values are no longer limited to lowercase hex. Previously uppercase hex were scrubbed. [[#165](https://github.com/flavorjones/loofah/issues/165)] (Thanks, [@asok](https://github.com/asok)!)
54
61
 
55
62
 
56
63
  ### Deprecations / Name Changes
@@ -61,7 +68,7 @@ The following method and constants are hereby deprecated, and will be completely
61
68
  * Deprecate `Loofah::Helpers::ActionView::WhiteListSanitizer`, please use `Loofah::Helpers::ActionView::SafeListSanitizer` instead.
62
69
  * Deprecate `Loofah::HTML5::WhiteList`, please use `Loofah::HTML5::SafeList` instead.
63
70
 
64
- Thanks to @JuanitoFatas for submitting these changes in #164 and for making the language used in Loofah more inclusive.
71
+ Thanks to [@JuanitoFatas](https://github.com/JuanitoFatas) for submitting these changes in [#164](https://github.com/flavorjones/loofah/issues/164) and for making the language used in Loofah more inclusive.
65
72
 
66
73
 
67
74
  ## 2.2.3 / 2018-10-30
@@ -70,7 +77,7 @@ Thanks to @JuanitoFatas for submitting these changes in #164 and for making the
70
77
 
71
78
  Address CVE-2018-16468: Unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
72
79
 
73
- This CVE's public notice is at https://github.com/flavorjones/loofah/issues/154
80
+ This CVE's public notice is at [#154](https://github.com/flavorjones/loofah/issues/154)
74
81
 
75
82
 
76
83
  ## Meta / 2018-10-27
@@ -97,76 +104,76 @@ attribute scrubbers should they need to address CVE-2018-8048.
97
104
 
98
105
  Addresses CVE-2018-8048. Loofah allowed non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.
99
106
 
100
- This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
107
+ This CVE's public notice is at [#144](https://github.com/flavorjones/loofah/issues/144)
101
108
 
102
109
 
103
110
  ## 2.2.0 / 2018-02-11
104
111
 
105
112
  ### Features:
106
113
 
107
- * Support HTML5 `<main>` tag. #133 (Thanks, @MothOnMars!)
108
- * Recognize HTML5 block elements. #136 (Thanks, @MothOnMars!)
109
- * Support SVG `<symbol>` tag. #131 (Thanks, @baopham!)
110
- * Support for whitelisting CSS functions, initially just `calc` and `rgb`. #122/#123/#129 (Thanks, @NikoRoberts!)
111
- * Whitelist CSS property `list-style-type`. #68/#137/#142 (Thanks, @andela-ysanni and @NikoRoberts!)
114
+ * Support HTML5 `<main>` tag. [#133](https://github.com/flavorjones/loofah/issues/133) (Thanks, [@MothOnMars](https://github.com/MothOnMars)!)
115
+ * Recognize HTML5 block elements. [#136](https://github.com/flavorjones/loofah/issues/136) (Thanks, [@MothOnMars](https://github.com/MothOnMars)!)
116
+ * Support SVG `<symbol>` tag. [#131](https://github.com/flavorjones/loofah/issues/131) (Thanks, [@baopham](https://github.com/baopham)!)
117
+ * Support for whitelisting CSS functions, initially just `calc` and `rgb`. [#122](https://github.com/flavorjones/loofah/issues/122)/[#123](https://github.com/flavorjones/loofah/issues/123)/[#129](https://github.com/flavorjones/loofah/issues/129) (Thanks, [@NikoRoberts](https://github.com/NikoRoberts)!)
118
+ * Whitelist CSS property `list-style-type`. [#68](https://github.com/flavorjones/loofah/issues/68)/[#137](https://github.com/flavorjones/loofah/issues/137)/[#142](https://github.com/flavorjones/loofah/issues/142) (Thanks, [@andela-ysanni](https://github.com/andela-ysanni) and [@NikoRoberts](https://github.com/NikoRoberts)!)
112
119
 
113
120
  ### Bugfixes:
114
121
 
115
- * Properly handle nested `script` tags. #127.
122
+ * Properly handle nested `script` tags. [#127](https://github.com/flavorjones/loofah/issues/127).
116
123
 
117
124
 
118
125
  ## 2.1.1 / 2017-09-24
119
126
 
120
127
  ### Bugfixes:
121
128
 
122
- * Removed warning for unused variable. #124 (Thanks, @y-yagi!)
129
+ * Removed warning for unused variable. [#124](https://github.com/flavorjones/loofah/issues/124) (Thanks, [@y-yagi](https://github.com/y-yagi)!)
123
130
 
124
131
 
125
132
  ## 2.1.0 / 2017-09-24
126
133
 
127
134
  ### Notes:
128
135
 
129
- * Re-implemented CSS parsing and sanitization using the [crass](https://github.com/rgrove/crass) library. #91
136
+ * Re-implemented CSS parsing and sanitization using the [crass](https://github.com/rgrove/crass) library. [#91](https://github.com/flavorjones/loofah/issues/91)
130
137
 
131
138
 
132
139
  ### Features:
133
140
 
134
- * Added :noopener HTML scrubber (Thanks, @tastycode!)
135
- * Support `data` URIs with the following media types: text/plain, text/css, image/png, image/gif, image/jpeg, image/svg+xml. #101, #120. (Thanks, @mrpasquini!)
141
+ * Added :noopener HTML scrubber (Thanks, [@tastycode](https://github.com/tastycode)!)
142
+ * Support `data` URIs with the following media types: text/plain, text/css, image/png, image/gif, image/jpeg, image/svg+xml. [#101](https://github.com/flavorjones/loofah/issues/101), [#120](https://github.com/flavorjones/loofah/issues/120). (Thanks, [@mrpasquini](https://github.com/mrpasquini)!)
136
143
 
137
144
 
138
145
  ### Bugfixes:
139
146
 
140
- * The :unprintable scrubber now scrubs unprintable characters in CDATA nodes (like `<script>`). #124
141
- * Allow negative values in CSS properties. Restores functionality that was reverted in v2.0.3. #91
147
+ * The :unprintable scrubber now scrubs unprintable characters in CDATA nodes (like `<script>`). [#124](https://github.com/flavorjones/loofah/issues/124)
148
+ * Allow negative values in CSS properties. Restores functionality that was reverted in v2.0.3. [#91](https://github.com/flavorjones/loofah/issues/91)
142
149
 
143
150
 
144
151
  ## 2.0.3 / 2015-08-17
145
152
 
146
153
  ### Bug fixes:
147
154
 
148
- * Revert support for negative values in CSS properties due to slow performance. #90 (Related to #85.)
155
+ * Revert support for negative values in CSS properties due to slow performance. [#90](https://github.com/flavorjones/loofah/issues/90) (Related to [#85](https://github.com/flavorjones/loofah/issues/85).)
149
156
 
150
157
 
151
158
  ## 2.0.2 / 2015-05-05
152
159
 
153
160
  ### Bug fixes:
154
161
 
155
- * Fix error with `#to_text` when Loofah::Helpers hadn't been required. #75
156
- * Allow multi-word data attributes. #84 (Thanks, @jstorimer!)
157
- * Allow negative values in CSS properties. #85 (Thanks, @siddhartham!)
162
+ * Fix error with `#to_text` when Loofah::Helpers hadn't been required. [#75](https://github.com/flavorjones/loofah/issues/75)
163
+ * Allow multi-word data attributes. [#84](https://github.com/flavorjones/loofah/issues/84) (Thanks, [@jstorimer](https://github.com/jstorimer)!)
164
+ * Allow negative values in CSS properties. [#85](https://github.com/flavorjones/loofah/issues/85) (Thanks, [@siddhartham](https://github.com/siddhartham)!)
158
165
 
159
166
 
160
167
  ## 2.0.1 / 2014-08-21
161
168
 
162
169
  ### Bug fixes:
163
170
 
164
- * Load RR correctly when running test files directly. (Thanks, @ktdreyer!)
171
+ * Load RR correctly when running test files directly. (Thanks, [@ktdreyer](https://github.com/ktdreyer)!)
165
172
 
166
173
 
167
174
  ### Notes:
168
175
 
169
- * Extracted HTML5::Scrub#scrub_css_attribute to accommodate the Rails integration work. (Thanks, @kaspth!)
176
+ * Extracted HTML5::Scrub#scrub_css_attribute to accommodate the Rails integration work. (Thanks, [@kaspth](https://github.com/kaspth)!)
170
177
 
171
178
 
172
179
  ## 2.0.0 / 2014-05-09
@@ -182,19 +189,19 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
182
189
  * tags: `article`, `aside`, `bdi`, `bdo`, `canvas`, `command`, `datalist`, `details`, `figcaption`, `figure`, `footer`, `header`, `mark`, `meter`, `nav`, `output`, `section`, `summary`, `time`
183
190
  * attributes: `data-*` (Thanks, Rafael Franca!)
184
191
  * URI attributes: `poster` and `preload`
185
- * Addition of the `:unprintable` scrubber to remove unprintable characters from text nodes. #65 (Thanks, Matt Swanson!)
186
- * `Loofah.fragment` accepts an optional encoding argument, compatible with `Nokogiri::HTML::DocumentFragment.parse`. #62 (Thanks, Ben Atkins!)
192
+ * Addition of the `:unprintable` scrubber to remove unprintable characters from text nodes. [#65](https://github.com/flavorjones/loofah/issues/65) (Thanks, Matt Swanson!)
193
+ * `Loofah.fragment` accepts an optional encoding argument, compatible with `Nokogiri::HTML::DocumentFragment.parse`. [#62](https://github.com/flavorjones/loofah/issues/62) (Thanks, Ben Atkins!)
187
194
  * HTML5 sanitizers now remove attributes without values. (Thanks, Kasper Timm Hansen!)
188
195
 
189
196
  ### Bug fixes:
190
197
 
191
198
  * HTML5 sanitizers' CSS keyword check now actually works (broken in v2.0). Additional regression tests added. (Thanks, Kasper Timm Hansen!)
192
- * HTML5 sanitizers now allow negative arguments to CSS. #64 (Thanks, Jon Calhoun!)
199
+ * HTML5 sanitizers now allow negative arguments to CSS. [#64](https://github.com/flavorjones/loofah/issues/64) (Thanks, Jon Calhoun!)
193
200
 
194
201
 
195
202
  ## 1.2.1 (2012-04-14)
196
203
 
197
- * Declaring encoding in html5/scrub.rb. Without this, use of the ruby -KU option would cause havoc. (#32)
204
+ * Declaring encoding in html5/scrub.rb. Without this, use of the ruby -KU option would cause havoc. ([#32](https://github.com/flavorjones/loofah/issues/32))
198
205
 
199
206
 
200
207
  ## 1.2.0 (2011-08-08)
@@ -212,7 +219,7 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
212
219
  * Additional HTML5lib whitelist elements (from html5lib 1524:80b5efe26230).
213
220
  Up to date with HTML5lib ruby code as of 1723:7ee6a0331856.
214
221
  * Whitelists (which are not part of the public API) are now Sets (were previously Arrays).
215
- * Don't explode when encountering UTF-8 URIs. (#25, #29)
222
+ * Don't explode when encountering UTF-8 URIs. ([#25](https://github.com/flavorjones/loofah/issues/25), [#29](https://github.com/flavorjones/loofah/issues/29))
216
223
 
217
224
 
218
225
  ## 1.0.0 (2010-10-26)
@@ -230,7 +237,7 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
230
237
  * New methods Loofah::HTML::Document#to_text and
231
238
  Loofah::HTML::DocumentFragment#to_text do the right thing with
232
239
  whitespace. Note that these methods are significantly slower than
233
- #text. GH #12
240
+ #text. GH [#12](https://github.com/flavorjones/loofah/issues/12)
234
241
  * Loofah::Elements::BLOCK_LEVEL contains a canonical list of HTML4 block-level4 elements.
235
242
  * Loofah::HTML::Document#text and Loofah::HTML::DocumentFragment#text
236
243
  will return unescaped HTML entities by passing :encode_special_chars => false.
@@ -244,7 +251,7 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
244
251
 
245
252
  ### Bug fixes:
246
253
 
247
- * Loofah::XssFoliate was not properly escaping HTML entities when implicitly scrubbing a string attribute. GH #17
254
+ * Loofah::XssFoliate was not properly escaping HTML entities when implicitly scrubbing a string attribute. GH [#17](https://github.com/flavorjones/loofah/issues/17)
248
255
 
249
256
 
250
257
  ## 0.4.3 (2010-01-29)
@@ -272,7 +279,7 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
272
279
 
273
280
  ### Bug fixes:
274
281
 
275
- * Supporting Rails apps that aren't loading ActiveRecord. GH #10
282
+ * Supporting Rails apps that aren't loading ActiveRecord. GH [#10](https://github.com/flavorjones/loofah/issues/10)
276
283
 
277
284
  ### Miscellaneous:
278
285
 
@@ -333,13 +340,13 @@ This CVE's public notice is at https://github.com/flavorjones/loofah/issues/144
333
340
  ### Enhancements:
334
341
 
335
342
  * when loaded in a Rails app, automatically extend ActiveRecord::Base
336
- with html_fragment and html_document. GH #6 (Thanks Josh Nichols!)
343
+ with html_fragment and html_document. GH [#6](https://github.com/flavorjones/loofah/issues/6) (Thanks Josh Nichols!)
337
344
 
338
345
  ### Bugfixes:
339
346
 
340
347
  * ActiveRecord scrubbing should generate strings instead of Document or
341
- DocumentFragment objects. GH #5
342
- * init.rb fixed to support installation as a Rails plugin. GH #6
348
+ DocumentFragment objects. GH [#5](https://github.com/flavorjones/loofah/issues/5)
349
+ * init.rb fixed to support installation as a Rails plugin. GH [#6](https://github.com/flavorjones/loofah/issues/6)
343
350
  (Thanks Josh Nichols!)
344
351
 
345
352
 
data/Gemfile CHANGED
@@ -15,9 +15,10 @@ gem "hoe-gemspec", "~>1.0", :group => [:development, :test]
15
15
  gem "hoe-debugging", "~>2.0", :group => [:development, :test]
16
16
  gem "hoe-bundler", "~>1.5", :group => [:development, :test]
17
17
  gem "hoe-git", "~>1.6", :group => [:development, :test]
18
+ gem "hoe-markdown", "~>1.2", :group => [:development, :test]
18
19
  gem "concourse", ">=0.26.0", :group => [:development, :test]
19
20
  gem "rubocop", ">=0.76.0", :group => [:development, :test]
20
21
  gem "rdoc", ">=4.0", "<7", :group => [:development, :test]
21
- gem "hoe", "~>3.20", :group => [:development, :test]
22
+ gem "hoe", "~>3.22", :group => [:development, :test]
22
23
 
23
24
  # vim: syntax=ruby
data/Rakefile CHANGED
@@ -6,19 +6,18 @@ Hoe.plugin :git
6
6
  Hoe.plugin :gemspec
7
7
  Hoe.plugin :bundler
8
8
  Hoe.plugin :debugging
9
+ Hoe.plugin :markdown
9
10
 
10
11
  Hoe.spec "loofah" do
11
12
  developer "Mike Dalessio", "mike.dalessio@gmail.com"
12
13
  developer "Bryan Helmkamp", "bryan@brynary.com"
13
14
 
14
- self.history_file = "CHANGELOG.md"
15
- self.readme_file = "README.md"
16
15
  self.license "MIT"
17
16
  self.urls = {
18
17
  "home" => "https://github.com/flavorjones/loofah",
19
18
  "bugs" => "https://github.com/flavorjones/loofah/issues",
20
19
  "doco" => "https://www.rubydoc.info/gems/loofah/",
21
- "clog" => "https://github.com/flavorjones/loofah/master/CHANGELOG.md",
20
+ "clog" => "https://github.com/flavorjones/loofah/blob/master/CHANGELOG.md",
22
21
  "code" => "https://github.com/flavorjones/loofah",
23
22
  }
24
23
 
@@ -33,6 +32,7 @@ Hoe.spec "loofah" do
33
32
  extra_dev_deps << ["hoe-debugging", "~> 2.0"]
34
33
  extra_dev_deps << ["hoe-bundler", "~> 1.5"]
35
34
  extra_dev_deps << ["hoe-git", "~> 1.6"]
35
+ extra_dev_deps << ["hoe-markdown", "~> 1.2"]
36
36
  extra_dev_deps << ["concourse", ">=0.26.0"]
37
37
  extra_dev_deps << ["rubocop", ">=0.76.0"]
38
38
  end
data/lib/loofah.rb CHANGED
@@ -29,7 +29,7 @@ require "loofah/html/document_fragment"
29
29
  #
30
30
  module Loofah
31
31
  # The version of Loofah you are using
32
- VERSION = "2.5.0"
32
+ VERSION = "2.6.0"
33
33
 
34
34
  class << self
35
35
  # Shortcut for Loofah::HTML::Document.parse
data/lib/loofah/html5/safelist.rb CHANGED
@@ -614,9 +614,13 @@ module Loofah
614
614
  "collapse",
615
615
  "dashed",
616
616
  "dotted",
617
+ "double",
617
618
  "fuchsia",
618
619
  "gray",
619
620
  "green",
621
+ "groove",
622
+ "hidden",
623
+ "inset",
620
624
  "italic",
621
625
  "left",
622
626
  "lime",
@@ -627,9 +631,11 @@ module Loofah
627
631
  "normal",
628
632
  "nowrap",
629
633
  "olive",
634
+ "outset",
630
635
  "pointer",
631
636
  "purple",
632
637
  "red",
638
+ "ridge",
633
639
  "right",
634
640
  "silver",
635
641
  "solid",
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: loofah
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.5.0
4
+ version: 2.6.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Mike Dalessio
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2020-04-05 00:00:00.000000000 Z
12
+ date: 2020-06-16 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: nokogiri
@@ -151,6 +151,20 @@ dependencies:
151
151
  - - "~>"
152
152
  - !ruby/object:Gem::Version
153
153
  version: '1.6'
154
+ - !ruby/object:Gem::Dependency
155
+ name: hoe-markdown
156
+ requirement: !ruby/object:Gem::Requirement
157
+ requirements:
158
+ - - "~>"
159
+ - !ruby/object:Gem::Version
160
+ version: '1.2'
161
+ type: :development
162
+ prerelease: false
163
+ version_requirements: !ruby/object:Gem::Requirement
164
+ requirements:
165
+ - - "~>"
166
+ - !ruby/object:Gem::Version
167
+ version: '1.2'
154
168
  - !ruby/object:Gem::Dependency
155
169
  name: concourse
156
170
  requirement: !ruby/object:Gem::Requirement
@@ -263,7 +277,7 @@ metadata:
263
277
  homepage_uri: https://github.com/flavorjones/loofah
264
278
  bug_tracker_uri: https://github.com/flavorjones/loofah/issues
265
279
  documentation_uri: https://www.rubydoc.info/gems/loofah/
266
- changelog_uri: https://github.com/flavorjones/loofah/master/CHANGELOG.md
280
+ changelog_uri: https://github.com/flavorjones/loofah/blob/master/CHANGELOG.md
267
281
  source_code_uri: https://github.com/flavorjones/loofah
268
282
  post_install_message:
269
283
  rdoc_options: