| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ruby3.3-rubygem-loofah | Distribution: openSUSE Tumbleweed |
| Version: 2.22.0 | Vendor: openSUSE |
| Release: 1.3 | Build date: Sun Feb 25 16:18:44 2024 |
| Group: Development/Languages/Ruby | Build host: i04-ch1c |
| Size: 143211 | Source RPM: rubygem-loofah-2.22.0-1.3.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/flavorjones/loofah | |
| Summary: HTML/XML manipulation and sanitization based on Nokogiri | |
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization (XSS prevention). It includes some nice HTML sanitizers, which are based on HTML5lib's whitelist, so it most likely won't make your codes less secure.
MIT
* Tue Nov 14 2023 Dan Čermák <dan.cermak@posteo.net>
- ## 2.22.0 / 2023-11-13
[#]## Added
* A `:targetblank` HTML scrubber which ensures all hyperlinks have `target="_blank"`. [#275] @stefannibrasil and @thdaraujo
* A `:noreferrer` HTML scrubber which ensures all hyperlinks have `rel=noreferrer`, similar to the `:nofollow` and `:noopener` scrubbers. [#277] @wynksaiddestroy
* Fri Nov 03 2023 Dan Čermák <dan.cermak@posteo.net>
- ## 2.21.4 / 2023-10-10
[#]## Fixed
* `Loofah::HTML5::Scrub.scrub_css` is more consistent in preserving whitespace (and lack of whitespace) in CSS property values. In particular, `.scrub_css` no longer inserts whitespace between tokens that did not already have whitespace between them. [[#273](https://github.com/flavorjones/loofah/issues/273), fixes [#271](https://github.com/flavorjones/loofah/issues/271)]
[#]# 2.21.3 / 2023-05-15
[#]## Fixed
* Quash "instance variable not initialized" warning in Ruby < 3.0. [[#268](https://github.com/flavorjones/loofah/issues/268)] (Thanks, [@dharamgollapudi](https://github.com/dharamgollapudi)!)
[#]# 2.21.2 / 2023-05-11
[#]## Dependencies
* Update the dependency on Nokogiri to be `>= 1.12.0`. The dependency in 2.21.0 and 2.21.1 was left at `>= 1.5.9` but versions before 1.12 would result in a `NameError` exception. [[#266](https://github.com/flavorjones/loofah/issues/266)]
[#]# 2.21.1 / 2023-05-10
[#]## Fixed
* Don't define `HTML5::Document` and `HTML5::DocumentFragment` when Nokogiri is `< 1.14`. In 2.21.0 these classes were defined whenever `Nokogiri::HTML5` was defined, but Nokogiri v1.12 and v1.13 do not support Loofah subclassing properly.
[#]# 2.21.0 / 2023-05-10
[#]## HTML5 Support
Classes `Loofah::HTML5::Document` and `Loofah::HTML5::DocumentFragment` are introduced, along with helper methods:
- `Loofah.html5_document`
- `Loofah.html5_fragment`
- `Loofah.scrub_html5_document`
- `Loofah.scrub_html5_fragment`
These classes and methods use Nokogiri's HTML5 parser to ensure modern web standards are used.
⚠ HTML5 functionality is only available with Nokogiri v1.14.0 and higher.
⚠ HTML5 functionality is not available for JRuby. Please see [this upstream Nokogiri issue](https://github.com/sparklemotion/nokogiri/issues/2227) if you're interested in helping implement and support HTML5 support.
[#]## `Loofah::HTML4` module and namespace
`Loofah::HTML` has been renamed to `Loofah::HTML4`, and `Loofah::HTML` is aliased to preserve backwards-compatibility. `Nokogiri::HTML` and `Nokogiri::HTML4` parse methods still use libxml2's (or NekoHTML's) HTML4 parser.
Take special note that if you rely on the class name of an object in your code, objects will now report a class of `Loofah::HTML4::Foo` where they previously reported `Loofah::HTML::Foo`. Instead of relying on the string returned by `Object#class`, prefer `Class#===` or `Object#is_a?` or `Object#instance_of?`.
Future releases of Nokogiri may deprecate `HTML` classes and methods or otherwise change this behavior, so please start using `HTML4` in place of `HTML`.
[#]## Official support for JRuby
This version introduces official support for JRuby. Previously, the test suite had never been green due to differences in behavior in the underlying HTML parser used by Nokogiri. We've updated the test suite to accommodate those differences, and have added JRuby to the CI suite.
[#]# 2.20.0 / 2023-04-01
[#]## Features
* Allow SVG attributes `color-profile`, `cursor`, `filter`, `marker`, and `mask`. [[#246](https://github.com/flavorjones/loofah/issues/246)]
* Allow SVG elements `altGlyph`, `cursor`, `feImage`, `pattern`, and `tref`. [[#246](https://github.com/flavorjones/loofah/issues/246)]
* Allow protocols `fax` and `modem`. [[#255](https://github.com/flavorjones/loofah/issues/255)] (Thanks, [@cjba7](https://github.com/cjba7)!)
* Mon Mar 06 2023 Paolo Perego <paolo.perego@suse.com>
- udpated to version 2.19.1
[#]# 2.19.1 / 2022-12-13
[#]## SecurityAddress
* Address CVE-2022-23514, inefficient regular expression complexity. See GHSA-486f-hjj9-9vhh for more information.
* Address CVE-2022-23515, improper neutralization of data URIs. See GHSA-228g-948r-83gx for more information.
* Address CVE-2022-23516, uncontrolled recursion. See GHSA-3x8r-x6xp-q4vm for more information.
* Mon Oct 10 2022 Stephan Kulow <coolo@suse.com>
updated to version 2.19.0
see installed CHANGELOG.md
[#]# 2.19.0 / 2022-09-14
[#]## Features
* Allow SVG 1.0 color keyword names in CSS attributes. These colors are part of the [CSS Color Module Level 3](https://www.w3.org/TR/css-color-3/#svg-color) recommendation released 2022-01-18. [[#243](https://github.com/flavorjones/loofah/issues/243)]
* Sun May 15 2022 Manuel Schnitzer <mschnitzer@suse.com>
- updated to version 2.18.0
[#]## Features
* Allow CSS property `aspect-ratio`. [[#236](https://github.com/flavorjones/loofah/issues/236)] (Thanks, [@louim](https://github.com/louim)!)
[#]# 2.17.0 / 2022-04-28
[#]## Features
* Allow ARIA attributes. [[#232](https://github.com/flavorjones/loofah/issues/232), [#233](https://github.com/flavorjones/loofah/issues/233)] (Thanks, [@nick-desteffen](https://github.com/nick-desteffen)!)
* Thu Apr 28 2022 Stephan Kulow <coolo@suse.com>
updated to version 2.16.0
see installed CHANGELOG.md
[#]# 2.16.0 / 2022-04-01
[#]## Features
* Allow MathML elements `menclose` and `ms`, and MathML attributes `dir`, `href`, `lquote`, `mathsize`, `notation`, and `rquote`. [[#231](https://github.com/flavorjones/loofah/issues/231)] (Thanks, [@nick-desteffen](https://github.com/nick-desteffen)!)
[#]# 2.15.0 / 2022-03-14
[#]## Features
* Expand set of allowed protocols to include `sms:`. [[#228](https://github.com/flavorjones/loofah/issues/228)] (Thanks, [@brendon](https://github.com/brendon)!)
* Thu Mar 03 2022 Stephan Kulow <coolo@suse.com>
updated to version 2.14.0
see installed CHANGELOG.md
[#]# 2.14.0 / 2022-02-11
[#]## Features
* The `#to_text` method on `Loofah::HTML::{Document,DocumentFragment}` replaces `<br>` line break elements with a newline. [[#225](https://github.com/flavorjones/loofah/issues/225)]
* Fri Dec 24 2021 Manuel Schnitzer <mschnitzer@suse.com>
- updated to version 2.13.0
[#]## Bug fixes
* Loofah::HTML::DocumentFragment#text no longer serializes top-level comment children. [[#221](https://github.com/flavorjones/loofah/issues/221)]
* Wed Aug 25 2021 Manuel Schnitzer <mschnitzer@suse.com>
- updated to version 2.12.0
[#]# 2.12.0 / 2021-08-11
[#]## Features
* Support empty HTML5 data attributes. [[#215](https://github.com/flavorjones/loofah/issues/215)]
[#]# 2.11.0 / 2021-07-31
[#]## Features
* Allow HTML5 element `wbr`.
* Allow all CSS property values for `border-collapse`. [[#201](https://github.com/flavorjones/loofah/issues/201)]
[#]## Changes
* Deprecating `Loofah::HTML5::SafeList::VOID_ELEMENTS` which is not a canonical list of void HTML4 or HTML5 elements.
* Removed some elements from `Loofah::HTML5::SafeList::VOID_ELEMENTS` that either are not acceptable elements or aren't considered "void" by libxml2.
* Thu Jun 24 2021 Stephan Kulow <coolo@suse.com>
updated to version 2.10.0
see installed CHANGELOG.md
[#]# 2.10.0 / 2021-06-06
[#]## Features
* Allow CSS properties `overflow-x` and `overflow-y`. [[#206](https://github.com/flavorjones/loofah/issues/206)] (Thanks, [@sampokuokkanen](https://github.com/sampokuokkanen)!)
* Tue Apr 20 2021 Manuel Schnitzer <mschnitzer@suse.com>
- updated to version 2.9.1
[#]## Bug fixes
* Fix a regression in v2.9.0 which inappropriately removed CSS properties
with quoted string values. [[#202](https://github.com/flavorjones/loofah/issues/202)]
* Wed Jan 20 2021 Manuel Schnitzer <mschnitzer@suse.com>
- updated to version 2.9.0
* Handle CSS functions in a CSS shorthand property (like `background`). [[#199](https://github.com/flavorjones/loofah/issues/199),
[#200](https://github.com/flavorjones/loofah/issues/200)]
/usr/lib64/ruby/gems/3.3.0/build_info /usr/lib64/ruby/gems/3.3.0/cache/loofah-2.22.0.gem /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0 /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/CHANGELOG.md /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/MIT-LICENSE.txt /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/README.md /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/SECURITY.md /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/concerns.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/elements.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/helpers.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html4 /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html4/document.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html4/document_fragment.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5 /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5/document.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5/document_fragment.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5/libxml2_workarounds.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5/safelist.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/html5/scrub.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/metahelpers.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/scrubber.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/scrubbers.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/version.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/xml /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/xml/document.rb /usr/lib64/ruby/gems/3.3.0/gems/loofah-2.22.0/lib/loofah/xml/document_fragment.rb /usr/lib64/ruby/gems/3.3.0/specifications/loofah-2.22.0.gemspec /usr/share/doc/packages/ruby3.3-rubygem-loofah /usr/share/doc/packages/ruby3.3-rubygem-loofah/CHANGELOG.md /usr/share/doc/packages/ruby3.3-rubygem-loofah/MIT-LICENSE.txt /usr/share/doc/packages/ruby3.3-rubygem-loofah/README.md
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Apr 30 23:58:22 2024