Displaying 2 results from an estimated 2 matches for "html5lib".
2009 Oct 13
1
loofah 0.3.1 Released
...ttp://github.com/flavorjones/loofah>
Loofah is an HTML sanitizer. It will always fix broken markup, but
can also sanitize unsafe tags in a few different ways, and transform
the markup for storage or display.
It''s built on top of Nokogiri and libxml2, so it''s fast. And it uses
html5lib''s whitelist, so it most likely won''t make your codes less
secure. \*
\* These statements have not been evaluated by Netexperts.
== CHANGES in 0.3.1
Bug fixes:
* Scrubbed Documents properly render html, head and body tags when serialized.
== FEATURES
* _Strip_ unsafe tags, le...
2010 Feb 02
0
[Security] Loofah has an HTML injection / XSS vulnerability, please upgrade to 0.4.6
...ts/loofah>
Loofah is a general library for manipulating HTML/XML documents and
fragments. It''s built on top of Nokogiri and libxml2, so it''s fast and
has a nice API.
Loofah excels at HTML sanitization (XSS prevention). It includes some
nice HTML sanitizers, which are based on HTML5lib''s whitelist, so it
most likely won''t make your codes less secure. (These statements have
not been evaluated by Netexperts.)
## 0.4.6 (2010-02-02)
Enhancements:
* Loofah::HTML::Document#text and Loofah::HTML::DocumentFragment#text now
escape HTML entities.
Bug fixes:
* Loo...