nokogiri 1.6.2.rc3 → 1.6.2
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of nokogiri might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.ja.rdoc +54 -44
- data/CHANGELOG.rdoc +54 -60
- data/README.ja.rdoc +3 -4
- data/README.rdoc +2 -2
- data/lib/nokogiri/version.rb +1 -1
- data/ports/patches/libxml2/0011-Do-not-fetch-external-parameter-entities.patch +39 -0
- metadata +5 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 6d0ab593d0bcb4245a5e397a36552b750b9368ab
|
|
4
|
+
data.tar.gz: 7b765604091b8e6e389ae0fa715cef8d829813a1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: bcadf1074f623cb21bd91cce62324011269e76eb2629714adae009c31f02a248b62b30b499a50a0e2acc6af3597e5c0aebaee50fbc9fb1bd10936c62e2f5dc0d
|
|
7
|
+
data.tar.gz: d53643d965657aa24d13b965bf0a1cf4b74bd3f71483adc5a3769bb5c93fd59557c95bbd301196479083327d7e2afec1f697f5c62ba16b196a0b6e2492f8c83b
|
data/CHANGELOG.ja.rdoc
CHANGED
|
@@ -1,47 +1,57 @@
|
|
|
1
|
-
=== 1.6.2 /
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
*
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
*
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
1
|
+
=== 1.6.2 / 2014年5月12日
|
|
2
|
+
|
|
3
|
+
==== Security 註
|
|
4
|
+
|
|
5
|
+
A set of security and bugfix patches have been backported from the libxml2 and libxslt repositories onto the version of 2.8.0 packaged with Nokogiri, including these notable security fixes:
|
|
6
|
+
|
|
7
|
+
* https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f
|
|
8
|
+
* CVE-2013-2877 https://git.gnome.org/browse/libxml2/commit/?id=e50ba8164eee06461c73cd8abb9b46aa0be81869
|
|
9
|
+
* CVE-2014-0191 https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
|
|
10
|
+
|
|
11
|
+
It is recommended that you upgrade from 1.6.x to this version as soon as possible.
|
|
12
|
+
|
|
13
|
+
==== Compatibility 註
|
|
14
|
+
|
|
15
|
+
Now requires libxml >= 2.6.21 (was previously >= 2.6.17).
|
|
16
|
+
|
|
17
|
+
==== 機能
|
|
18
|
+
|
|
19
|
+
* Add cross building of fat binary gems for 64-Bit Windows (x64-mingw32)
|
|
20
|
+
and add support for native builds on Windows. #864, #989, #1072
|
|
21
|
+
* (MRI) iconvが Windows-31J をサポートしていない場合は CP932 のエイリアスとして扱うようにした #836
|
|
22
|
+
* (MRI) 同梱ライブラリを静的にリンクするようになった (静的リンクをオフにするにはextconf.rbに --disable-static を渡す) #923
|
|
23
|
+
* (MRI) CRubyのバグ #9760 に起因するライブラリパス(LIBPATH)の優先順位問題に対応した
|
|
24
|
+
* (MRI) 同梱ライブラリのビルド後に不要になったディレクトリ群を自動的に削除するようになった (デバッグ等の目的で残すようにするにはextconf.rbに --disable-clean を渡す) #952
|
|
25
|
+
* (MRI) FreeBSDなど、libiconvがシステム標準ディレクトリ外にある環境でlibxml2がiconvサポート付きで正しくビルドされるようになった
|
|
26
|
+
* nthセレクタにおいてan-bを認識するようになった #886 (Magnus Bergmarkに感謝!)
|
|
27
|
+
* :not疑似クラスが、先行セレクタがない場合や複数重ねられた場合にも対応した #887 (Magnus Bergmarkに感謝!)
|
|
28
|
+
* (MRI) extconf.rb のオプション --use-system-libraries を追加
|
|
29
|
+
環境変数 NOKOGIRI_USE_SYSTEM_LIBRARIES を設定する代わりに使える
|
|
30
|
+
* (MRI) 同梱の libxslt を 1.1.28 に、 zlib を 1.2.8 に、 libiconv を 1.14 にそれぞれ更新した
|
|
31
|
+
* Nokogiri::HTML::Document#title= 及び #meta_encoding= は、head要素がない場合でも常に、最適な場所を探しつつ要素を追加するようになった
|
|
32
|
+
* Nokogiri::XML::DTD#html_dtd? と #html5_dtd? を追加
|
|
33
|
+
* Nokogiri::XML::Node#prepend_child を追加 #664
|
|
34
|
+
* Nokogiri::XML::SAX::ParserContext#recovery is added. #453
|
|
35
|
+
|
|
36
|
+
==== バグ修正
|
|
37
|
+
|
|
38
|
+
* :only-child疑似クラスが:not疑似クラスの中にある場合に正常な動作が行われるようになった #858 (Yamagishi Kazutoshiに感謝!)
|
|
39
|
+
* 同梱のライブラリを使う場合にはextconf.rbでpkg_configを呼ばなくなった #931 (Shota Fukumoriに感謝!)
|
|
40
|
+
* Nokogiri.parse()がRSS文書などをHTML文書として誤認する問題を修正 #932 (Yamagishi Kazutoshiに感謝!)
|
|
41
|
+
* (MRI) ノードに対して子ノードを追加する際、ノードタイプをチェックするようにした。従来はテキストノードに別のテキストノードを追加する操作によりSEGVが発生していた。 #1092
|
|
42
|
+
* (JRuby) XSD validation crashes in Java version. #373
|
|
43
|
+
* (JRuby) Document already has a root node error while using Builder. #646
|
|
44
|
+
* (JRuby) c14n tests are all passing on JRuby. #226
|
|
45
|
+
* Parsing empty documents raise SyntaxError in strict mode. #1005
|
|
46
|
+
* (JRuby) Make xpath faster by caching the xpath context. #741
|
|
47
|
+
* (JRuby) XML SAX push parser leaks memory on JRuby, but not on MRI. #998
|
|
48
|
+
* (JRUby) JRubyによるディフォルトネームスペースエイリアスの振る舞いがCRubyと同じではない。#940
|
|
49
|
+
* (JRuby) JRubyによるネームスペースのパースと追加の振る舞いが一致していない。 #943
|
|
50
|
+
* (JRuby) Builderで作ったドキュメントとクローンしたドキュメントではXpathの結果が違う。#1034
|
|
51
|
+
* (JRuby) Javaの実装はネームスペースを忘れることがある。 #902
|
|
52
|
+
* (JRuby) JRuby-Nokogiriはネームスペーススコープ内のアトリビュートを正しく認識しない。#1081
|
|
53
|
+
* (JRuby) JRuby-Nokogiriはコメントノードの名前が違う。#1080
|
|
54
|
+
* (JRuby) JAXPExtensionsProvider / Java 7 / Secure Processingに問題がある。 #1070
|
|
45
55
|
|
|
46
56
|
=== 1.6.1 / 2013年12月14日
|
|
47
57
|
|
data/CHANGELOG.rdoc
CHANGED
|
@@ -1,63 +1,57 @@
|
|
|
1
|
-
=== 1.6.2 /
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
*
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
*
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
* (JRuby) Xpath returns inconsistent result set on cloned document with
|
|
56
|
-
namespaces and attributes. #1034
|
|
57
|
-
* (JRuby) Java-Implementation forgets element namespaces #902
|
|
58
|
-
* (JRuby) JRuby-Nokogiri does not recognise attributes inside namespaces #1081
|
|
59
|
-
* (JRuby) JRuby-Nokogiri has different comment node name #1080
|
|
60
|
-
* (JRuby) JAXPExtensionsProvider / Java 7 / Secure Processing #1070
|
|
1
|
+
=== 1.6.2 / 2014-05-12
|
|
2
|
+
|
|
3
|
+
==== Security Note
|
|
4
|
+
|
|
5
|
+
A set of security and bugfix patches have been backported from the libxml2 and libxslt repositories onto the version of 2.8.0 packaged with Nokogiri, including these notable security fixes:
|
|
6
|
+
|
|
7
|
+
* https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f
|
|
8
|
+
* CVE-2013-2877 https://git.gnome.org/browse/libxml2/commit/?id=e50ba8164eee06461c73cd8abb9b46aa0be81869
|
|
9
|
+
* CVE-2014-0191 https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
|
|
10
|
+
|
|
11
|
+
It is recommended that you upgrade from 1.6.x to this version as soon as possible.
|
|
12
|
+
|
|
13
|
+
==== Compatibility Note
|
|
14
|
+
|
|
15
|
+
Now requires libxml >= 2.6.21 (was previously >= 2.6.17).
|
|
16
|
+
|
|
17
|
+
==== Features
|
|
18
|
+
|
|
19
|
+
* Add cross building of fat binary gems for 64-Bit Windows (x64-mingw32) and add support for native builds on Windows. #864, #989, #1072
|
|
20
|
+
* (MRI) Alias CP932 to Windows-31J if iconv does not support Windows-31J.
|
|
21
|
+
* (MRI) Nokogiri now links packaged libraries statically. To disable static linking, pass --disable-static to extconf.rb. #923
|
|
22
|
+
* (MRI) Fix a library path (LIBPATH) precedence problem caused by CRuby bug #9760.
|
|
23
|
+
* (MRI) Nokogiri automatically deletes directories of packaged libraries only used during build. To keep them for debugging purposes, pass --disable-clean to extconf.rb. #952
|
|
24
|
+
* (MRI) Nokogiri now builds libxml2 properly with iconv support on platforms where libiconv is installed outside the system default directories, such as FreeBSD.
|
|
25
|
+
* Add support for an-b in nth selectors. #886 (Thanks, Magnus Bergmark!)
|
|
26
|
+
* Add support for bare and multiple :not() functions in selectors. #887 (Thanks, Magnus Bergmark!)
|
|
27
|
+
* (MRI) Add an extconf.rb option --use-system-libraries, alternative to setting the environment variable NOKOGIRI_USE_SYSTEM_LIBRARIES.
|
|
28
|
+
* (MRI) Update packaged libraries: libxslt to 1.1.28, zlib to 1.2.8, and libiconv to 1.14, respectively.
|
|
29
|
+
* Nokogiri::HTML::Document#title= and #meta_encoding= now always add an element if not present, trying hard to find the best place to put it.
|
|
30
|
+
* Nokogiri::XML::DTD#html_dtd? and #html5_dtd? are added.
|
|
31
|
+
* Nokogiri::XML::Node#prepend_child is added. #664
|
|
32
|
+
* Nokogiri::XML::SAX::ParserContext#recovery is added. #453
|
|
33
|
+
* Fix documentation for XML::Node#namespace. #803 #802 (Thanks, Hoylen Sue)
|
|
34
|
+
* Allow Nokogiri::XML::Node#parse from unparented non-element nodes. #407
|
|
35
|
+
|
|
36
|
+
==== Bugfixes
|
|
37
|
+
|
|
38
|
+
* Ensure :only-child pseudo class works within :not pseudo class. #858 (Thanks, Yamagishi Kazutoshi!)
|
|
39
|
+
* Don't call pkg_config when using bundled libraries in extconf.rb #931 (Thanks, Shota Fukumori!)
|
|
40
|
+
* Nokogiri.parse() does not mistake a non-HTML document like a RSS document as HTML document. #932 (Thanks, Yamagishi Kazutoshi!)
|
|
41
|
+
* (MRI) Perform a node type check before adding a child node to another. Previously adding a text node to another as a child could cause a SEGV. #1092
|
|
42
|
+
* (JRuby) XSD validation crashes in Java version. #373
|
|
43
|
+
* (JRuby) Document already has a root node error while using Builder. #646
|
|
44
|
+
* (JRuby) c14n tests are all passing on JRuby. #226
|
|
45
|
+
* Parsing empty documents raise SyntaxError in strict mode. #1005
|
|
46
|
+
* (JRuby) Make xpath faster by caching the xpath context. #741
|
|
47
|
+
* (JRuby) XML SAX push parser leaks memory on JRuby, but not on MRI. #998
|
|
48
|
+
* (JRuby) Inconsistent behavior aliasing the default namespace. #940
|
|
49
|
+
* (JRuby) Inconsistent behavior between parsing and adding namespaces. #943
|
|
50
|
+
* (JRuby) Xpath returns inconsistent result set on cloned document with namespaces and attributes. #1034
|
|
51
|
+
* (JRuby) Java-Implementation forgets element namespaces #902
|
|
52
|
+
* (JRuby) JRuby-Nokogiri does not recognise attributes inside namespaces #1081
|
|
53
|
+
* (JRuby) JRuby-Nokogiri has different comment node name #1080
|
|
54
|
+
* (JRuby) JAXPExtensionsProvider / Java 7 / Secure Processing #1070
|
|
61
55
|
|
|
62
56
|
=== 1.6.1 / 2013-12-14
|
|
63
57
|
|
data/README.ja.rdoc
CHANGED
|
@@ -1,9 +1,8 @@
|
|
|
1
1
|
= Nokogiri (鋸) {<img src="https://secure.travis-ci.org/sparklemotion/nokogiri.png?rvm=1.9.3" />}[http://travis-ci.org/sparklemotion/nokogiri] {<img src="https://codeclimate.com/badge.png" />}[https://codeclimate.com/github/sparklemotion/nokogiri]
|
|
2
2
|
|
|
3
|
-
* http://nokogiri.org
|
|
4
|
-
* https://github.com/sparklemotion/nokogiri
|
|
5
|
-
* https://
|
|
6
|
-
* https://groups.google.com/group/nokogiri-list
|
|
3
|
+
* http://nokogiri.org
|
|
4
|
+
* https://github.com/sparklemotion/nokogiri
|
|
5
|
+
* https://groups.google.com/group/nokogiri-talk
|
|
7
6
|
* https://github.com/sparklemotion/nokogiri/issues
|
|
8
7
|
|
|
9
8
|
== DESCRIPTION:
|
data/README.rdoc
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
= Nokogiri {<img src="https://secure.travis-ci.org/sparklemotion/nokogiri.png?rvm=1.9.3" />}[http://travis-ci.org/sparklemotion/nokogiri] {<img src="https://codeclimate.com/github/sparklemotion/nokogiri.png" />}[https://codeclimate.com/github/sparklemotion/nokogiri] {<img src="https://www.versioneye.com/ruby/nokogiri/badge.png" alt="Dependency Status" />}[https://www.versioneye.com/ruby/nokogiri]
|
|
2
|
+
|
|
2
3
|
* http://nokogiri.org
|
|
3
|
-
* https://github.com/sparklemotion/nokogiri
|
|
4
|
-
* https://github.com/sparklemotion/nokogiri/tree/master
|
|
4
|
+
* https://github.com/sparklemotion/nokogiri
|
|
5
5
|
* https://groups.google.com/group/nokogiri-talk
|
|
6
6
|
* https://github.com/sparklemotion/nokogiri/issues
|
|
7
7
|
|
data/lib/nokogiri/version.rb
CHANGED
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
From 9cd1c3cfbd32655d60572c0a413e017260c854df Mon Sep 17 00:00:00 2001
|
|
2
|
+
From: Daniel Veillard <veillard@redhat.com>
|
|
3
|
+
Date: Tue, 22 Apr 2014 15:30:56 +0800
|
|
4
|
+
Subject: [PATCH] Do not fetch external parameter entities
|
|
5
|
+
|
|
6
|
+
Unless explicitely asked for when validating or replacing entities
|
|
7
|
+
with their value. Problem pointed out by Daniel Berrange <berrange@redhat.com>
|
|
8
|
+
---
|
|
9
|
+
parser.c | 14 ++++++++++++++
|
|
10
|
+
1 file changed, 14 insertions(+)
|
|
11
|
+
|
|
12
|
+
diff --git a/parser.c b/parser.c
|
|
13
|
+
index 9347ac9..c0dea05 100644
|
|
14
|
+
--- a/parser.c
|
|
15
|
+
+++ b/parser.c
|
|
16
|
+
@@ -2598,6 +2598,20 @@ xmlParserHandlePEReference(xmlParserCtxtPtr ctxt) {
|
|
17
|
+
xmlCharEncoding enc;
|
|
18
|
+
|
|
19
|
+
/*
|
|
20
|
+
+ * Note: external parsed entities will not be loaded, it is
|
|
21
|
+
+ * not required for a non-validating parser, unless the
|
|
22
|
+
+ * option of validating, or substituting entities were
|
|
23
|
+
+ * given. Doing so is far more secure as the parser will
|
|
24
|
+
+ * only process data coming from the document entity by
|
|
25
|
+
+ * default.
|
|
26
|
+
+ */
|
|
27
|
+
+ if ((entity->etype == XML_EXTERNAL_PARAMETER_ENTITY) &&
|
|
28
|
+
+ ((ctxt->options & XML_PARSE_NOENT) == 0) &&
|
|
29
|
+
+ ((ctxt->options & XML_PARSE_DTDVALID) == 0) &&
|
|
30
|
+
+ (ctxt->validate == 0))
|
|
31
|
+
+ return;
|
|
32
|
+
+
|
|
33
|
+
+ /*
|
|
34
|
+
* handle the extra spaces added before and after
|
|
35
|
+
* c.f. http://www.w3.org/TR/REC-xml#as-PE
|
|
36
|
+
* this is done independently.
|
|
37
|
+
--
|
|
38
|
+
1.8.3.2
|
|
39
|
+
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: nokogiri
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.6.2
|
|
4
|
+
version: 1.6.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Aaron Patterson
|
|
@@ -12,7 +12,7 @@ authors:
|
|
|
12
12
|
autorequire:
|
|
13
13
|
bindir: bin
|
|
14
14
|
cert_chain: []
|
|
15
|
-
date: 2014-05-
|
|
15
|
+
date: 2014-05-12 00:00:00.000000000 Z
|
|
16
16
|
dependencies:
|
|
17
17
|
- !ruby/object:Gem::Dependency
|
|
18
18
|
name: mini_portile
|
|
@@ -405,6 +405,7 @@ files:
|
|
|
405
405
|
- ports/patches/libxml2/0008-Improve-handling-of-xmlStopParser.patch
|
|
406
406
|
- ports/patches/libxml2/0009-Fix-a-couple-of-return-without-value.patch
|
|
407
407
|
- ports/patches/libxml2/0010-Keep-non-significant-blanks-node-in-HTML-parser.patch
|
|
408
|
+
- ports/patches/libxml2/0011-Do-not-fetch-external-parameter-entities.patch
|
|
408
409
|
- ports/patches/libxslt/0001-Adding-doc-update-related-to-1.1.28.patch
|
|
409
410
|
- ports/patches/libxslt/0002-Fix-a-couple-of-places-where-f-printf-parameters-wer.patch
|
|
410
411
|
- ports/patches/libxslt/0003-Initialize-pseudo-random-number-generator-with-curre.patch
|
|
@@ -546,9 +547,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
546
547
|
version: 1.9.2
|
|
547
548
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
548
549
|
requirements:
|
|
549
|
-
- - '
|
|
550
|
+
- - '>='
|
|
550
551
|
- !ruby/object:Gem::Version
|
|
551
|
-
version:
|
|
552
|
+
version: '0'
|
|
552
553
|
requirements: []
|
|
553
554
|
rubyforge_project: nokogiri
|
|
554
555
|
rubygems_version: 2.2.2
|