All releases of htmLawed


Release Notes: This release has a fix for a bug in the tidy functionality that caused the entire input to be replaced with a single space. There is a new parameter, $config["direct_list_nest"], to allow direct descendance of a list in a list.


Release Notes: This release fixes a nesting rule for the 'li' element within the 'dir' element.


Release Notes: The "schemes" parameter now accepts "!" so any URL, even a local one, can be denied. An issue in which a second URL value in CSS properties in "style" values was not checked was fixed. Documentation was improved.


Release Notes: An improved check for nesting of the 'param' element.


Release Notes: A minor fix regarding rendering of denied URL schemes.


Release Notes: htmLawed now uses the LGPL version 3 license. Support was added for the 'flashvars' attribute for the 'embed' element.


Release Notes: Soft hyphens are now removed only from URL-accepting attribute values.


Release Notes: A minor code change was made to stop PHP from producing a warning.


Release Notes: The deny_attribute parameter now accepts the * wildcard, making it simpler to specify its value when all but a few attributes are being denied. A bug in interpreting $spec was fixed.


Release Notes: Attributes globally denied through deny_attribute can be allowed to an element specifically through $spec. The logic was altered to catch certain types of dynamic crafted CSS expressions.
A security-aware parser for the HTTP protocol and the related bits and pieces.