loofah 2.19.1 → 2.20.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +9 -0
- data/lib/loofah/html5/safelist.rb +12 -0
- data/lib/loofah/version.rb +1 -1
- metadata +3 -17
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b06da35026008830bdcee25d54ccaf1cafb06cbb7ed92cd4fbbfd147b022c693
|
|
4
|
+
data.tar.gz: 67dd118c7d21f3bcb80b27b3c4e125907eacfc14f26c5ee1232b3f238eea9dbf
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 66a34115418e430e251bd599dd7529eeac2efd7d0c8795ac8001f810451fc871ef0a42fd1c767b78a90dc64d62323dadb1d9093d352e024785608ddafd43ec00
|
|
7
|
+
data.tar.gz: 31d10913e97432fb5a511019b22b6b9325b5c9e7e2cfc28aaf175fdb0ad62e9449c7879ff47f1fbca82ab1f36eec05751b7051c1eefcbdf0c6d04b60b592a45f
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 2.20.0 / 2023-04-01
|
|
4
|
+
|
|
5
|
+
### Features
|
|
6
|
+
|
|
7
|
+
* Allow SVG attributes `color-profile`, `cursor`, `filter`, `marker`, and `mask`. [[#246](https://github.com/flavorjones/loofah/issues/246)]
|
|
8
|
+
* Allow SVG elements `altGlyph`, `cursor`, `feImage`, `pattern`, and `tref`. [[#246](https://github.com/flavorjones/loofah/issues/246)]
|
|
9
|
+
* Allow protocols `fax` and `modem`. [[#255](https://github.com/flavorjones/loofah/issues/255)] (Thanks, [@cjba7](https://github.com/cjba7)!)
|
|
10
|
+
|
|
11
|
+
|
|
3
12
|
## 2.19.1 / 2022-12-13
|
|
4
13
|
|
|
5
14
|
### Security
|
|
@@ -181,16 +181,19 @@ module Loofah
|
|
|
181
181
|
|
|
182
182
|
SVG_ELEMENTS = Set.new([
|
|
183
183
|
"a",
|
|
184
|
+
"altGlyph",
|
|
184
185
|
"animate",
|
|
185
186
|
"animateColor",
|
|
186
187
|
"animateMotion",
|
|
187
188
|
"animateTransform",
|
|
188
189
|
"circle",
|
|
189
190
|
"clipPath",
|
|
191
|
+
"cursor",
|
|
190
192
|
"defs",
|
|
191
193
|
"desc",
|
|
192
194
|
"ellipse",
|
|
193
195
|
"feGaussianBlur",
|
|
196
|
+
"feImage",
|
|
194
197
|
"filter",
|
|
195
198
|
"font-face",
|
|
196
199
|
"font-face-name",
|
|
@@ -207,6 +210,7 @@ module Loofah
|
|
|
207
210
|
"missing-glyph",
|
|
208
211
|
"mpath",
|
|
209
212
|
"path",
|
|
213
|
+
"pattern",
|
|
210
214
|
"polygon",
|
|
211
215
|
"polyline",
|
|
212
216
|
"radialGradient",
|
|
@@ -219,6 +223,7 @@ module Loofah
|
|
|
219
223
|
"text",
|
|
220
224
|
"textPath",
|
|
221
225
|
"title",
|
|
226
|
+
"tref",
|
|
222
227
|
"tspan",
|
|
223
228
|
"use",
|
|
224
229
|
])
|
|
@@ -377,8 +382,10 @@ module Loofah
|
|
|
377
382
|
"clip-rule",
|
|
378
383
|
"color",
|
|
379
384
|
"color-interpolation-filters",
|
|
385
|
+
"color-profile",
|
|
380
386
|
"color-rendering",
|
|
381
387
|
"content",
|
|
388
|
+
"cursor",
|
|
382
389
|
"cx",
|
|
383
390
|
"cy",
|
|
384
391
|
"d",
|
|
@@ -391,6 +398,7 @@ module Loofah
|
|
|
391
398
|
"fill",
|
|
392
399
|
"fill-opacity",
|
|
393
400
|
"fill-rule",
|
|
401
|
+
"filter",
|
|
394
402
|
"filterRes",
|
|
395
403
|
"filterUnits",
|
|
396
404
|
"font-family",
|
|
@@ -416,12 +424,14 @@ module Loofah
|
|
|
416
424
|
"keySplines",
|
|
417
425
|
"keyTimes",
|
|
418
426
|
"lang",
|
|
427
|
+
"marker",
|
|
419
428
|
"marker-end",
|
|
420
429
|
"marker-mid",
|
|
421
430
|
"marker-start",
|
|
422
431
|
"markerHeight",
|
|
423
432
|
"markerUnits",
|
|
424
433
|
"markerWidth",
|
|
434
|
+
"mask",
|
|
425
435
|
"maskContentUnits",
|
|
426
436
|
"maskUnits",
|
|
427
437
|
"mathematical",
|
|
@@ -972,6 +982,7 @@ module Loofah
|
|
|
972
982
|
"callto",
|
|
973
983
|
"data",
|
|
974
984
|
"ed2k",
|
|
985
|
+
"fax",
|
|
975
986
|
"feed",
|
|
976
987
|
"ftp",
|
|
977
988
|
"gopher",
|
|
@@ -980,6 +991,7 @@ module Loofah
|
|
|
980
991
|
"irc",
|
|
981
992
|
"line",
|
|
982
993
|
"mailto",
|
|
994
|
+
"modem",
|
|
983
995
|
"news",
|
|
984
996
|
"nntp",
|
|
985
997
|
"rsync",
|
data/lib/loofah/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: loofah
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.
|
|
4
|
+
version: 2.20.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Mike Dalessio
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date:
|
|
12
|
+
date: 2023-04-01 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: crass
|
|
@@ -115,20 +115,6 @@ dependencies:
|
|
|
115
115
|
- - "<"
|
|
116
116
|
- !ruby/object:Gem::Version
|
|
117
117
|
version: '7'
|
|
118
|
-
- !ruby/object:Gem::Dependency
|
|
119
|
-
name: rr
|
|
120
|
-
requirement: !ruby/object:Gem::Requirement
|
|
121
|
-
requirements:
|
|
122
|
-
- - "~>"
|
|
123
|
-
- !ruby/object:Gem::Version
|
|
124
|
-
version: 1.2.0
|
|
125
|
-
type: :development
|
|
126
|
-
prerelease: false
|
|
127
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
128
|
-
requirements:
|
|
129
|
-
- - "~>"
|
|
130
|
-
- !ruby/object:Gem::Version
|
|
131
|
-
version: 1.2.0
|
|
132
118
|
- !ruby/object:Gem::Dependency
|
|
133
119
|
name: rubocop
|
|
134
120
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -199,7 +185,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
199
185
|
- !ruby/object:Gem::Version
|
|
200
186
|
version: '0'
|
|
201
187
|
requirements: []
|
|
202
|
-
rubygems_version: 3.
|
|
188
|
+
rubygems_version: 3.4.10
|
|
203
189
|
signing_key:
|
|
204
190
|
specification_version: 4
|
|
205
191
|
summary: Loofah is a general library for manipulating and transforming HTML/XML documents
|