sanitize 4.1.0 → 4.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: db5b47018757eca02968cca236fae793558f28a3
-  data.tar.gz: 2556f1ebfb26b038190f334a39aff61315cd57b0
+  metadata.gz: abb1df5c4bd3af158380b4fd3125ab354f0d8cfa
+  data.tar.gz: 9e418edd6b360cb64579d5cd1e57f9e4acb8e527
 SHA512:
-  metadata.gz: 2ddad668c07d8440a7e3bd4ccf4a066f6c1f0a7d9aeb8a0f43bd04569c8b5dd7959130d50c0725f902fa6f1bf8ed930b4d00ee4fa977f3364702d53387463b39
-  data.tar.gz: 677279ef0d92a8e1d96e1ac28cfa12a5e4934887952a75dc891a5f37014352b8369f5effc1e480a10ae10363724840dbb1a9b5ec7b60b317a501ec370811d5b4
+  metadata.gz: 78570f43744763cddcc1eee64bc62f2d315cbf544b21c022ee49184b30f680d294388d8d63fac8bd6fefdaff7acc202bdcd30ff3dc7418d0bd802c661eeb2fad
+  data.tar.gz: 2fe95ba29fede36ba37f0d28e58336369cf3745936ef9397ee27872f8586e25ba10568911d67225928aa905141b6a692a2afc5d959f25dc329014cd5ecff9def

data/HISTORY.md

@@ -1,5 +1,17 @@
 # Sanitize History
 
+## 4.2.0 (2016-08-22)
+
+* Added `-webkit-font-smoothing` to the relaxed CSS config. [@louim - #154][154]
+
+* Fixed: Nokogumbo >=1.4.9 changed its behavior in a way that allowed invalid
+  doctypes (like `<!DOCTYPE nonsense>`) when the `:allow_doctype` config setting
+  was `true`. Invalid doctypes are now coerced to valid ones as they were prior
+  to this Nokogumbo change.
+
+[154]:https://github.com/rgrove/sanitize/pull/154
+
+
 ## 4.1.0 (2016-06-17)
 
 * Added a new CSS config setting, `:import_url_validator`. This is a Proc or

data/lib/sanitize.rb

@@ -82,7 +82,6 @@ class Sanitize
     # Default transformers always run at the end of the chain, after any custom
     # transformers.
     @transformers << Transformers::CleanComment unless @config[:allow_comments]
-    @transformers << Transformers::CleanDoctype unless @config[:allow_doctype]
 
     if @config[:elements].include?('style')
       scss = Sanitize::CSS.new(config)
@@ -95,6 +94,7 @@ class Sanitize
     end
 
     @transformers <<
+        Transformers::CleanDoctype <<
         Transformers::CleanCDATA <<
         Transformers::CleanElement.new(@config)
   end

data/lib/sanitize/config/relaxed.rb

@@ -254,6 +254,7 @@ class Sanitize
           -webkit-flow-from
           -webkit-flow-into
           -webkit-font-size-delta
+          -webkit-font-smoothing
           -webkit-grid-area
           -webkit-grid-auto-columns
           -webkit-grid-auto-flow

data/lib/sanitize/transformers/clean_doctype.rb

@@ -3,10 +3,16 @@
 class Sanitize; module Transformers
 
   CleanDoctype = lambda do |env|
+    return if env[:is_whitelisted]
+
     node = env[:node]
 
     if node.type == Nokogiri::XML::Node::DTD_NODE
-      node.unlink unless env[:is_whitelisted]
+      if env[:config][:allow_doctype]
+        node.name = 'html'
+      else
+        node.unlink
+      end
     end
   end
 

data/lib/sanitize/version.rb

@@ -1,5 +1,5 @@
 # encoding: utf-8
 
 class Sanitize
-  VERSION = '4.1.0'
+  VERSION = '4.2.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sanitize
 version: !ruby/object:Gem::Version
-  version: 4.1.0
+  version: 4.2.0
 platform: ruby
 authors:
 - Ryan Grove
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-17 00:00:00.000000000 Z
+date: 2016-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: crass