We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 165bf4c commit f9888c9Copy full SHA for f9888c9
CHANGES.rst
@@ -6,6 +6,12 @@ Change Log
6
7
Released on April 29, 2015
8
9
+* Fix #153: Sanitizer fails to treat some attributes as URLs. Despite how
10
+ this sounds, this has no known security implications. No known version
11
+ of IE (5.5 to current), Firefox (3 to current), Safari (6 to current),
12
+ Chrome (1 to current), or Opera (12 to current) will run any script
13
+ provided in these attributes.
14
+
15
* Pass error message to the ParseError exception in strict parsing mode.
16
17
* Allow data URIs in the sanitizer, with a whitelist of content-types.
0 commit comments