HTML Purifier

The 2.0.1 release introduces a number of stability and usability fixes, as well as a number of (disabled by default) experimental features. The security-minded should note that a reflected XSS vulnerability was patched in smoketests/configForm.php; ... [More] if you cannot upgrade immediately, please delete that file (if that directory is not publically accessible, there is no security risk). The maintenance changes include more helpful file permissions errors, internal newline normalization, reordered includes to prevent a missing class definition in some setups, and better cache revision and id handling. The two experimental features are auto-formatting (auto-paragraphing and linkification) and error collection, these can be enabled with %AutoFormat.AutoParagraph, %AutoFormat.Linkify and %Core.CollectErrors respectively. As usual, see News for a complete changelog. [Less]

HTML Purifier 2.0 is the culmination of two major architectural changes. The first is Tidy, which enables HTML Purifier to both natively support deprecated elements and also convert them to standards-compliant alternatives. The second is the Advanced ... [More] API, which enables users to create new elements and attributes with ease. Keeping in line with a commitment to high quality, there are also five esoteric bug-fixes and a plethora of subtle improvements that enhance the library. Because this is a major version number jump, you can read the full article at 2.0.0 Released. See News for a complete changelog. [Less]

The 1.6.1 release, code-named “Ach! We missed something! Run!”, completes HTML Purifier's roster of attribute transformations. It also implements a number of minor features (such as better font transformations, smarter HTML parsing, the CSS property ... [More] 'white-space' and XHTML 1.1), a few bug fixes (most notably fixed __autoload compatibility issues) and a ton of refactoring. 1.6 was for things that absolutely could not wait: this release, developed in a more leisurely pace, fills in the gaps. As usual, see News for a complete changelog. [Less]

The 1.6.1 release, code-named “Ach! We missed something! Run!”, completes HTML Purifier's roster of attribute transformations. It also implements a number of minor features (such as better font transformations, smarter HTML parsing, the CSS property ... [More] 'white-space' and XHTML 1.1), a few bug fixes (most notably fixed __autoload compatibility issues) and a ton of refactoring. 1.6 was for things that absolutely could not wait: this release, developed in a more leisurely pace, fills in the gaps. As usual, see News for a complete changelog. [Less]

The 1.6.1 release, code-named “Ach! We missed something! Run!”, completes HTML Purifier's roster of attribute transformations. It also implements a number of minor features (such as better font transformations, smarter HTML parsing, the CSS property ... [More] 'white-space' and XHTML 1.1), a few bug fixes (most notably fixed __autoload compatibility issues) and a ton of refactoring. 1.6 was for things that absolutely could not wait: this release, developed in a more leisurely pace, fills in the gaps. As usual, see News for a complete changelog. [Less]

Recently, a packaging problem with the PEAR version of HTML Purifier was pointed out to me by David Schmierer. This bug would cause HTML Purifier to fail converting HTML entities such as  . The 1.6.0 release was amended accordingly and re-released. ... [More] If you are using the PEAR release, use: pear install --force hp/HTMLPurifier ...to force an update. Users who manually downloaded the library and installed do not have to do anything. [Less]

Recently, a packaging problem with the PEAR version of HTML Purifier was pointed out to me by David Schmierer. This bug would cause HTML Purifier to fail converting HTML entities such as  . The 1.6.0 release was amended accordingly and re-released. ... [More] If you are using the PEAR release, use: pear install --force hp/HTMLPurifier ...to force an update. Users who manually downloaded the library and installed do not have to do anything. [Less]

Recently, a packaging problem with the PEAR version of HTML Purifier was pointed out to me by David Schmierer. This bug would cause HTML Purifier to fail converting HTML entities such as  . The 1.6.0 release was amended accordingly and re-released. ... [More] If you are using the PEAR release, use: pear install --force hp/HTMLPurifier ...to force an update. Users who manually downloaded the library and installed do not have to do anything. [Less]

We have relocated from hp.jpsband.org to htmlpurifier.org. Please update your links and bookmarks accordingly. Permanent redirects are in place, so old links will continue to work for a while. However, some pages have changed locations in the ... [More] shuffle: live/docs/examples/demo.php is now demo.phplive/docs/ is now docs/v/viewvc.cgi/ is now viewvc.cgi/ Also, PEAR users will need to uninstall their old copy of HTML Purifier, remove the old channel, and then discover and install at the new domain. This set of commands should do the trick: pear uninstall hp/HTMLPurifier pear channel-delete hp.jpsband.org pear channel-discover htmlpurifier.org pear install hp/HTMLPurifier Thank you all for your cooperation. If there are any blips, please report them to the general forums or my new email address, [email protected] [Less]

We have relocated from hp.jpsband.org to htmlpurifier.org. Please update your links and bookmarks accordingly. Permanent redirects are in place, so old links will continue to work for a while. However, some pages have changed locations in the ... [More] shuffle: live/docs/examples/demo.php is now demo.phplive/docs/ is now docs/v/viewvc.cgi/ is now viewvc.cgi/ Also, PEAR users will need to uninstall their old copy of HTML Purifier, remove the old channel, and then discover and install at the new domain. This set of commands should do the trick: pear uninstall hp/HTMLPurifier pear channel-delete hp.jpsband.org pear channel-discover htmlpurifier.org pear install hp/HTMLPurifier Thank you all for your cooperation. If there are any blips, please report them to the general forums or my new email address, [email protected] [Less]