Skip to content

Commit b287d2a

Browse files
chore(release): 4.19.0 [skip ci]
# [4.19.0](v4.18.0...v4.19.0) (2025-10-17) ### Bug Fixes * add warning for misleading option ([#433](#433)) ([b21a591](b21a591)) * catastrophic backtracking in Core.AggressivelyFixLt ([#440](#440)) ([418eeb7](418eeb7)) * Deprecated: preg_replace(): Passing null to parameter [#3](#3) ($subject) o… ([#421](#421)) ([5d154a2](5d154a2)) * non-substantive typos ([#434](#434)) ([c2bc354](c2bc354)) ### Features * Add CSS direction support ([#429](#429)) ([63e631e](63e631e)) * Add option for safe iframe hosts using array lookup ([#423](#423)) ([b5cbf0c](b5cbf0c)) * Allow more image widths by default ([#430](#430)) ([00a0748](00a0748)) * Define option URI.AllowedSymbols ([#447](#447)) ([77ebd08](77ebd08)) * PHP 8.4 support ([#441](#441)) ([ff005f6](ff005f6)) * Support PHP 8.5 versions ([#453](#453)) ([1eb05d9](1eb05d9))
1 parent 1eb05d9 commit b287d2a

File tree

7 files changed

+67
-42
lines changed

7 files changed

+67
-42
lines changed

Doxyfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ PROJECT_NAME = HTMLPurifier
3131
# This could be handy for archiving the generated documentation or
3232
# if some version control system is used.
3333

34-
PROJECT_NUMBER = 4.18.0
34+
PROJECT_NUMBER = 4.19.0
3535

3636
# The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute)
3737
# base path where the generated documentation will be put.

NEWS

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,23 @@
1+
# [4.19.0](https://github.com/ezyang/htmlpurifier/compare/v4.18.0...v4.19.0) (2025-10-17)
2+
3+
4+
### Bug Fixes
5+
6+
* add warning for misleading option ([#433](https://github.com/ezyang/htmlpurifier/issues/433)) ([b21a591](https://github.com/ezyang/htmlpurifier/commit/b21a59101fe8b3e68185f4929a0bc44f4eb36653))
7+
* catastrophic backtracking in Core.AggressivelyFixLt ([#440](https://github.com/ezyang/htmlpurifier/issues/440)) ([418eeb7](https://github.com/ezyang/htmlpurifier/commit/418eeb7dc0e16a8cbba4393bf8f51aa91f9112f9))
8+
* Deprecated: preg_replace(): Passing null to parameter [#3](https://github.com/ezyang/htmlpurifier/issues/3) ($subject) o… ([#421](https://github.com/ezyang/htmlpurifier/issues/421)) ([5d154a2](https://github.com/ezyang/htmlpurifier/commit/5d154a239367e8886a1d1d67d68ff015cafa6814))
9+
* non-substantive typos ([#434](https://github.com/ezyang/htmlpurifier/issues/434)) ([c2bc354](https://github.com/ezyang/htmlpurifier/commit/c2bc3549a392722ab3b5aa4de973673db9e1708f))
10+
11+
12+
### Features
13+
14+
* Add CSS direction support ([#429](https://github.com/ezyang/htmlpurifier/issues/429)) ([63e631e](https://github.com/ezyang/htmlpurifier/commit/63e631ebd34f40d702adfb61fe00a5c9631ba443))
15+
* Add option for safe iframe hosts using array lookup ([#423](https://github.com/ezyang/htmlpurifier/issues/423)) ([b5cbf0c](https://github.com/ezyang/htmlpurifier/commit/b5cbf0cc3da70ded91e8b118e2a582026b1e6d61))
16+
* Allow more image widths by default ([#430](https://github.com/ezyang/htmlpurifier/issues/430)) ([00a0748](https://github.com/ezyang/htmlpurifier/commit/00a0748427d08e0c462e65cdd192bdc921c532ac))
17+
* Define option URI.AllowedSymbols ([#447](https://github.com/ezyang/htmlpurifier/issues/447)) ([77ebd08](https://github.com/ezyang/htmlpurifier/commit/77ebd086321fb68bbcdb65f3c68ce15d23573172))
18+
* PHP 8.4 support ([#441](https://github.com/ezyang/htmlpurifier/issues/441)) ([ff005f6](https://github.com/ezyang/htmlpurifier/commit/ff005f6edc4d55f03d756c2d25141c4278286137))
19+
* Support PHP 8.5 versions ([#453](https://github.com/ezyang/htmlpurifier/issues/453)) ([1eb05d9](https://github.com/ezyang/htmlpurifier/commit/1eb05d9864620e926535ce2131803acd2a6d7a4d))
20+
121
# [4.18.0](https://github.com/ezyang/htmlpurifier/compare/v4.17.0...v4.18.0) (2024-11-01)
222

323

VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
4.18.0
1+
4.19.0

configdoc/usage.xml

Lines changed: 40 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -11,45 +11,45 @@
1111
<file name="HTMLPurifier/Lexer/DirectLex.php">
1212
<line>67</line>
1313
<line>87</line>
14-
<line>385</line>
14+
<line>363</line>
1515
</file>
1616
<file name="HTMLPurifier/Strategy/RemoveForeignElements.php">
1717
<line>57</line>
1818
</file>
1919
</directive>
2020
<directive id="CSS.MaxImgLength">
2121
<file name="HTMLPurifier/CSSDefinition.php">
22-
<line>253</line>
22+
<line>258</line>
2323
</file>
2424
</directive>
2525
<directive id="CSS.Proprietary">
2626
<file name="HTMLPurifier/CSSDefinition.php">
27-
<line>397</line>
27+
<line>402</line>
2828
</file>
2929
</directive>
3030
<directive id="CSS.AllowTricky">
3131
<file name="HTMLPurifier/CSSDefinition.php">
32-
<line>401</line>
32+
<line>406</line>
3333
</file>
3434
</directive>
3535
<directive id="CSS.Trusted">
3636
<file name="HTMLPurifier/CSSDefinition.php">
37-
<line>405</line>
37+
<line>410</line>
3838
</file>
3939
</directive>
4040
<directive id="CSS.AllowImportant">
4141
<file name="HTMLPurifier/CSSDefinition.php">
42-
<line>409</line>
42+
<line>414</line>
4343
</file>
4444
</directive>
4545
<directive id="CSS.AllowedProperties">
4646
<file name="HTMLPurifier/CSSDefinition.php">
47-
<line>538</line>
47+
<line>543</line>
4848
</file>
4949
</directive>
5050
<directive id="CSS.ForbiddenProperties">
5151
<file name="HTMLPurifier/CSSDefinition.php">
52-
<line>554</line>
52+
<line>559</line>
5353
</file>
5454
</directive>
5555
<directive id="Cache.DefinitionImpl">
@@ -80,18 +80,18 @@
8080
<directive id="Core.Encoding">
8181
<file name="HTMLPurifier/Encoder.php">
8282
<line>380</line>
83-
<line>428</line>
83+
<line>427</line>
8484
</file>
8585
</directive>
8686
<directive id="Test.ForceNoIconv">
8787
<file name="HTMLPurifier/Encoder.php">
8888
<line>388</line>
89-
<line>439</line>
89+
<line>438</line>
9090
</file>
9191
</directive>
9292
<directive id="Core.EscapeNonASCIICharacters">
9393
<file name="HTMLPurifier/Encoder.php">
94-
<line>429</line>
94+
<line>428</line>
9595
</file>
9696
</directive>
9797
<directive id="Output.CommentScriptContents">
@@ -139,37 +139,37 @@
139139
</directive>
140140
<directive id="HTML.Parent">
141141
<file name="HTMLPurifier/HTMLDefinition.php">
142-
<line>273</line>
142+
<line>272</line>
143143
</file>
144144
</directive>
145145
<directive id="HTML.AllowedElements">
146146
<file name="HTMLPurifier/HTMLDefinition.php">
147-
<line>291</line>
147+
<line>286</line>
148148
</file>
149149
</directive>
150150
<directive id="HTML.AllowedAttributes">
151151
<file name="HTMLPurifier/HTMLDefinition.php">
152-
<line>292</line>
152+
<line>287</line>
153153
</file>
154154
</directive>
155155
<directive id="HTML.Allowed">
156156
<file name="HTMLPurifier/HTMLDefinition.php">
157-
<line>295</line>
157+
<line>290</line>
158158
</file>
159159
</directive>
160160
<directive id="HTML.ForbiddenElements">
161161
<file name="HTMLPurifier/HTMLDefinition.php">
162-
<line>399</line>
162+
<line>394</line>
163163
</file>
164164
</directive>
165165
<directive id="HTML.ForbiddenAttributes">
166166
<file name="HTMLPurifier/HTMLDefinition.php">
167-
<line>400</line>
167+
<line>395</line>
168168
</file>
169169
</directive>
170170
<directive id="HTML.Trusted">
171171
<file name="HTMLPurifier/HTMLModuleManager.php">
172-
<line>234</line>
172+
<line>230</line>
173173
</file>
174174
<file name="HTMLPurifier/Lexer.php">
175175
<line>304</line>
@@ -193,55 +193,55 @@
193193
</directive>
194194
<directive id="HTML.AllowedModules">
195195
<file name="HTMLPurifier/HTMLModuleManager.php">
196-
<line>241</line>
196+
<line>237</line>
197197
</file>
198198
</directive>
199199
<directive id="HTML.CoreModules">
200200
<file name="HTMLPurifier/HTMLModuleManager.php">
201-
<line>242</line>
201+
<line>238</line>
202202
</file>
203203
</directive>
204204
<directive id="HTML.Proprietary">
205205
<file name="HTMLPurifier/HTMLModuleManager.php">
206-
<line>256</line>
206+
<line>252</line>
207207
</file>
208208
</directive>
209209
<directive id="HTML.SafeObject">
210210
<file name="HTMLPurifier/HTMLModuleManager.php">
211-
<line>259</line>
211+
<line>255</line>
212212
</file>
213213
</directive>
214214
<directive id="HTML.SafeEmbed">
215215
<file name="HTMLPurifier/HTMLModuleManager.php">
216-
<line>262</line>
216+
<line>258</line>
217217
</file>
218218
</directive>
219219
<directive id="HTML.SafeScripting">
220220
<file name="HTMLPurifier/HTMLModuleManager.php">
221-
<line>265</line>
221+
<line>261</line>
222222
</file>
223223
<file name="HTMLPurifier/HTMLModule/SafeScripting.php">
224224
<line>22</line>
225225
</file>
226226
</directive>
227227
<directive id="HTML.Nofollow">
228228
<file name="HTMLPurifier/HTMLModuleManager.php">
229-
<line>268</line>
229+
<line>264</line>
230230
</file>
231231
</directive>
232232
<directive id="HTML.TargetBlank">
233233
<file name="HTMLPurifier/HTMLModuleManager.php">
234-
<line>271</line>
234+
<line>267</line>
235235
</file>
236236
</directive>
237237
<directive id="HTML.TargetNoreferrer">
238238
<file name="HTMLPurifier/HTMLModuleManager.php">
239-
<line>276</line>
239+
<line>272</line>
240240
</file>
241241
</directive>
242242
<directive id="HTML.TargetNoopener">
243243
<file name="HTMLPurifier/HTMLModuleManager.php">
244-
<line>279</line>
244+
<line>275</line>
245245
</file>
246246
</directive>
247247
<directive id="Attr.IDBlacklist">
@@ -304,6 +304,11 @@
304304
<line>35</line>
305305
</file>
306306
</directive>
307+
<directive id="URI.AllowedSymbols">
308+
<file name="HTMLPurifier/URI.php">
309+
<line>111</line>
310+
</file>
311+
</directive>
307312
<directive id="URI.">
308313
<file name="HTMLPurifier/URIDefinition.php">
309314
<line>65</line>
@@ -406,7 +411,7 @@
406411
</directive>
407412
<directive id="Attr.">
408413
<file name="HTMLPurifier/AttrDef/HTML/LinkTypes.php">
409-
<line>46</line>
414+
<line>41</line>
410415
</file>
411416
</directive>
412417
<directive id="Core.AllowHostnameUnderscore">
@@ -462,13 +467,13 @@
462467
</directive>
463468
<directive id="Cache.SerializerPath">
464469
<file name="HTMLPurifier/DefinitionCache/Serializer.php">
465-
<line>185</line>
470+
<line>186</line>
466471
</file>
467472
</directive>
468473
<directive id="Cache.SerializerPermissions">
469474
<file name="HTMLPurifier/DefinitionCache/Serializer.php">
470-
<line>202</line>
471-
<line>218</line>
475+
<line>203</line>
476+
<line>219</line>
472477
</file>
473478
</directive>
474479
<directive id="Filter.ExtractStyleBlocks.TidyImpl">
@@ -552,12 +557,12 @@
552557
</directive>
553558
<directive id="Core.AllowParseManyTags">
554559
<file name="HTMLPurifier/Lexer/DOMLex.php">
555-
<line>72</line>
560+
<line>65</line>
556561
</file>
557562
</directive>
558563
<directive id="Core.RemoveBlanks">
559564
<file name="HTMLPurifier/Lexer/DOMLex.php">
560-
<line>75</line>
565+
<line>68</line>
561566
</file>
562567
</directive>
563568
<directive id="Core.DirectLexLineNumberSyncInterval">
@@ -610,7 +615,7 @@
610615
</directive>
611616
<directive id="URI.SafeIframeHosts">
612617
<file name="HTMLPurifier/URIFilter/SafeIframe.php">
613-
<line>67</line>
618+
<line>64</line>
614619
</file>
615620
</directive>
616621
</usage>

library/HTMLPurifier.includes.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
* primary concern and you are using an opcode cache. PLEASE DO NOT EDIT THIS
88
* FILE, changes will be overwritten the next time the script is run.
99
*
10-
* @version 4.18.0
10+
* @version 4.19.0
1111
*
1212
* @warning
1313
* You must *not* include any other HTML Purifier files before this file,

library/HTMLPurifier.php

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
*/
2020

2121
/*
22-
HTML Purifier 4.18.0 - Standards Compliant HTML Filtering
22+
HTML Purifier 4.19.0 - Standards Compliant HTML Filtering
2323
Copyright (C) 2006-2008 Edward Z. Yang
2424
2525
This library is free software; you can redistribute it and/or
@@ -58,12 +58,12 @@ class HTMLPurifier
5858
* Version of HTML Purifier.
5959
* @type string
6060
*/
61-
public $version = '4.18.0';
61+
public $version = '4.19.0';
6262

6363
/**
6464
* Constant with version of HTML Purifier.
6565
*/
66-
const VERSION = '4.18.0';
66+
const VERSION = '4.19.0';
6767

6868
/**
6969
* Global configuration object.

library/HTMLPurifier/Config.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ class HTMLPurifier_Config
2121
* HTML Purifier's version
2222
* @type string
2323
*/
24-
public $version = '4.18.0';
24+
public $version = '4.19.0';
2525

2626
/**
2727
* Whether or not to automatically finalize

0 commit comments

Comments
 (0)