70e9fd7a0a
## 2.3.1 / 2019-10-22 ### Security Address CVE-2019-15587: Unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. This CVE's public notice is at https://github.com/flavorjones/loofah/issues/171 ## 2.3.0 / unreleased ### Features * Expand set of allowed protocols to include `tel:` and `line:`. [#104, #147] * Expand set of allowed CSS functions. [related to #122] * Allow greater precision in shorthand CSS values. [#149] (Thanks, @danfstucky!) * Allow CSS property `list-style` [#162] (Thanks, @jaredbeck!) * Allow CSS keywords `thick` and `thin` [#168] (Thanks, @georgeclaghorn!) * Allow HTML property `contenteditable` [#167] (Thanks, @andreynering!) ### Bug fixes * CSS hex values are no longer limited to lowercase hex. Previously uppercase hex were scrubbed. [#165] (Thanks, @asok!) ### Deprecations / Name Changes The following method and constants are hereby deprecated, and will be completely removed in a future release: * Deprecate `Loofah::Helpers::ActionView.white_list_sanitizer`, please use `Loofah::Helpers::ActionView.safe_list_sanitizer` instead. * Deprecate `Loofah::Helpers::ActionView::WhiteListSanitizer`, please use `Loofah::Helpers::ActionView::SafeListSanitizer` instead. * Deprecate `Loofah::HTML5::WhiteList`, please use `Loofah::HTML5::SafeList` instead. Thanks to @JuanitoFatas for submitting these changes in #164 and for making the language used in Loofah more inclusive.
17 lines
470 B
Makefile
17 lines
470 B
Makefile
# $NetBSD: Makefile,v 1.6 2019/10/22 16:24:20 taca Exp $
|
|
|
|
DISTNAME= loofah-2.3.1
|
|
CATEGORIES= www
|
|
|
|
MAINTAINER= minskim@NetBSD.org
|
|
HOMEPAGE= https://github.com/kieranmasterton/loofah
|
|
COMMENT= HTML sanitizer for Rails applications
|
|
LICENSE= mit
|
|
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-nokogiri>=1.5.9:../../textproc/ruby-nokogiri
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-crass>=1.0.2<1.1:../../www/ruby-crass
|
|
|
|
USE_LANGUAGES= # none
|
|
|
|
.include "../../lang/ruby/gem.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|