Mercurial > repos > guerler > springsuite
comparison planemo/lib/python3.7/site-packages/bleach-3.1.5.dist-info/METADATA @ 0:d30785e31577 draft
"planemo upload commit 6eee67778febed82ddd413c3ca40b3183a3898f1"
author | guerler |
---|---|
date | Fri, 31 Jul 2020 00:18:57 -0400 |
parents | |
children |
comparison
equal
deleted
inserted
replaced
-1:000000000000 | 0:d30785e31577 |
---|---|
1 Metadata-Version: 2.1 | |
2 Name: bleach | |
3 Version: 3.1.5 | |
4 Summary: An easy safelist-based HTML-sanitizing tool. | |
5 Home-page: https://github.com/mozilla/bleach | |
6 Maintainer: Will Kahn-Greene | |
7 Maintainer-email: willkg@mozilla.com | |
8 License: Apache Software License | |
9 Platform: UNKNOWN | |
10 Classifier: Development Status :: 5 - Production/Stable | |
11 Classifier: Environment :: Web Environment | |
12 Classifier: Intended Audience :: Developers | |
13 Classifier: License :: OSI Approved :: Apache Software License | |
14 Classifier: Operating System :: OS Independent | |
15 Classifier: Programming Language :: Python | |
16 Classifier: Programming Language :: Python :: 2 | |
17 Classifier: Programming Language :: Python :: 2.7 | |
18 Classifier: Programming Language :: Python :: 3 | |
19 Classifier: Programming Language :: Python :: 3.5 | |
20 Classifier: Programming Language :: Python :: 3.6 | |
21 Classifier: Programming Language :: Python :: 3.7 | |
22 Classifier: Programming Language :: Python :: 3.8 | |
23 Classifier: Programming Language :: Python :: Implementation :: CPython | |
24 Classifier: Programming Language :: Python :: Implementation :: PyPy | |
25 Classifier: Topic :: Software Development :: Libraries :: Python Modules | |
26 Requires-Python: >=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.* | |
27 Requires-Dist: packaging | |
28 Requires-Dist: six (>=1.9.0) | |
29 Requires-Dist: webencodings | |
30 | |
31 ====== | |
32 Bleach | |
33 ====== | |
34 | |
35 .. image:: https://travis-ci.org/mozilla/bleach.svg?branch=master | |
36 :target: https://travis-ci.org/mozilla/bleach | |
37 | |
38 .. image:: https://badge.fury.io/py/bleach.svg | |
39 :target: http://badge.fury.io/py/bleach | |
40 | |
41 Bleach is an allowed-list-based HTML sanitizing library that escapes or strips | |
42 markup and attributes. | |
43 | |
44 Bleach can also linkify text safely, applying filters that Django's ``urlize`` | |
45 filter cannot, and optionally setting ``rel`` attributes, even on links already | |
46 in the text. | |
47 | |
48 Bleach is intended for sanitizing text from *untrusted* sources. If you find | |
49 yourself jumping through hoops to allow your site administrators to do lots of | |
50 things, you're probably outside the use cases. Either trust those users, or | |
51 don't. | |
52 | |
53 Because it relies on html5lib_, Bleach is as good as modern browsers at dealing | |
54 with weird, quirky HTML fragments. And *any* of Bleach's methods will fix | |
55 unbalanced or mis-nested tags. | |
56 | |
57 The version on GitHub_ is the most up-to-date and contains the latest bug | |
58 fixes. You can find full documentation on `ReadTheDocs`_. | |
59 | |
60 :Code: https://github.com/mozilla/bleach | |
61 :Documentation: https://bleach.readthedocs.io/ | |
62 :Issue tracker: https://github.com/mozilla/bleach/issues | |
63 :License: Apache License v2; see LICENSE file | |
64 | |
65 | |
66 Reporting Bugs | |
67 ============== | |
68 | |
69 For regular bugs, please report them `in our issue tracker | |
70 <https://github.com/mozilla/bleach/issues>`_. | |
71 | |
72 If you believe that you've found a security vulnerability, please `file a secure | |
73 bug report in our bug tracker | |
74 <https://bugzilla.mozilla.org/enter_bug.cgi?assigned_to=nobody%40mozilla.org&product=Webtools&component=Bleach-security&groups=webtools-security>`_ | |
75 or send an email to *security AT mozilla DOT org*. | |
76 | |
77 For more information on security-related bug disclosure and the PGP key to use | |
78 for sending encrypted mail or to verify responses received from that address, | |
79 please read our wiki page at | |
80 `<https://www.mozilla.org/en-US/security/#For_Developers>`_. | |
81 | |
82 | |
83 Security | |
84 ======== | |
85 | |
86 Bleach is a security-focused library. | |
87 | |
88 We have a responsible security vulnerability reporting process. Please use | |
89 that if you're reporting a security issue. | |
90 | |
91 Security issues are fixed in private. After we land such a fix, we'll do a | |
92 release. | |
93 | |
94 For every release, we mark security issues we've fixed in the ``CHANGES`` in | |
95 the **Security issues** section. We include any relevant CVE links. | |
96 | |
97 | |
98 Installing Bleach | |
99 ================= | |
100 | |
101 Bleach is available on PyPI_, so you can install it with ``pip``:: | |
102 | |
103 $ pip install bleach | |
104 | |
105 | |
106 Upgrading Bleach | |
107 ================ | |
108 | |
109 .. warning:: | |
110 | |
111 Before doing any upgrades, read through `Bleach Changes | |
112 <https://bleach.readthedocs.io/en/latest/changes.html>`_ for backwards | |
113 incompatible changes, newer versions, etc. | |
114 | |
115 | |
116 Basic use | |
117 ========= | |
118 | |
119 The simplest way to use Bleach is: | |
120 | |
121 .. code-block:: python | |
122 | |
123 >>> import bleach | |
124 | |
125 >>> bleach.clean('an <script>evil()</script> example') | |
126 u'an <script>evil()</script> example' | |
127 | |
128 >>> bleach.linkify('an http://example.com url') | |
129 u'an <a href="http://example.com" rel="nofollow">http://example.com</a> url' | |
130 | |
131 | |
132 Code of Conduct | |
133 =============== | |
134 | |
135 This project and repository is governed by Mozilla's code of conduct and | |
136 etiquette guidelines. For more details please see the `CODE_OF_CONDUCT.md | |
137 </CODE_OF_CONDUCT.md>`_ | |
138 | |
139 | |
140 .. _html5lib: https://github.com/html5lib/html5lib-python | |
141 .. _GitHub: https://github.com/mozilla/bleach | |
142 .. _ReadTheDocs: https://bleach.readthedocs.io/ | |
143 .. _PyPI: https://pypi.org/project/bleach/ | |
144 | |
145 | |
146 Bleach changes | |
147 ============== | |
148 | |
149 Version 3.1.5 (April 29th, 2020) | |
150 -------------------------------- | |
151 | |
152 **Security fixes** | |
153 | |
154 None | |
155 | |
156 **Features** | |
157 | |
158 None | |
159 | |
160 **Bug fixes** | |
161 | |
162 * replace missing ``setuptools`` dependency with ``packaging``. Thank you Benjamin Peterson. | |
163 | |
164 Version 3.1.4 (March 24th, 2020) | |
165 -------------------------------- | |
166 | |
167 **Security fixes** | |
168 | |
169 * ``bleach.clean`` behavior parsing style attributes could result in a | |
170 regular expression denial of service (ReDoS). | |
171 | |
172 Calls to ``bleach.clean`` with an allowed tag with an allowed | |
173 ``style`` attribute were vulnerable to ReDoS. For example, | |
174 ``bleach.clean(..., attributes={'a': ['style']})``. | |
175 | |
176 This issue was confirmed in Bleach versions v3.1.3, v3.1.2, v3.1.1, | |
177 v3.1.0, v3.0.0, v2.1.4, and v2.1.3. Earlier versions used a similar | |
178 regular expression and should be considered vulnerable too. | |
179 | |
180 Anyone using Bleach <=v3.1.3 is encouraged to upgrade. | |
181 | |
182 https://bugzilla.mozilla.org/show_bug.cgi?id=1623633 | |
183 | |
184 **Backwards incompatible changes** | |
185 | |
186 * Style attributes with dashes, or single or double quoted values are | |
187 cleaned instead of passed through. | |
188 | |
189 **Features** | |
190 | |
191 None | |
192 | |
193 **Bug fixes** | |
194 | |
195 None | |
196 | |
197 Version 3.1.3 (March 17th, 2020) | |
198 -------------------------------- | |
199 | |
200 **Security fixes** | |
201 | |
202 None | |
203 | |
204 **Backwards incompatible changes** | |
205 | |
206 None | |
207 | |
208 **Features** | |
209 | |
210 * Add relative link to code of conduct. (#442) | |
211 | |
212 * Drop deprecated 'setup.py test' support. (#507) | |
213 | |
214 * Fix typo: curren -> current in tests/test_clean.py (#504) | |
215 | |
216 * Test on PyPy 7 | |
217 | |
218 * Drop test support for end of life Python 3.4 | |
219 | |
220 **Bug fixes** | |
221 | |
222 None | |
223 | |
224 Version 3.1.2 (March 11th, 2020) | |
225 -------------------------------- | |
226 | |
227 **Security fixes** | |
228 | |
229 * ``bleach.clean`` behavior parsing embedded MathML and SVG content | |
230 with RCDATA tags did not match browser behavior and could result in | |
231 a mutation XSS. | |
232 | |
233 Calls to ``bleach.clean`` with ``strip=False`` and ``math`` or | |
234 ``svg`` tags and one or more of the RCDATA tags ``script``, | |
235 ``noscript``, ``style``, ``noframes``, ``iframe``, ``noembed``, or | |
236 ``xmp`` in the allowed tags whitelist were vulnerable to a mutation | |
237 XSS. | |
238 | |
239 This security issue was confirmed in Bleach version v3.1.1. Earlier | |
240 versions are likely affected too. | |
241 | |
242 Anyone using Bleach <=v3.1.1 is encouraged to upgrade. | |
243 | |
244 https://bugzilla.mozilla.org/show_bug.cgi?id=1621692 | |
245 | |
246 **Backwards incompatible changes** | |
247 | |
248 None | |
249 | |
250 **Features** | |
251 | |
252 None | |
253 | |
254 **Bug fixes** | |
255 | |
256 None | |
257 | |
258 Version 3.1.1 (February 13th, 2020) | |
259 ----------------------------------- | |
260 | |
261 **Security fixes** | |
262 | |
263 * ``bleach.clean`` behavior parsing ``noscript`` tags did not match | |
264 browser behavior. | |
265 | |
266 Calls to ``bleach.clean`` allowing ``noscript`` and one or more of | |
267 the raw text tags (``title``, ``textarea``, ``script``, ``style``, | |
268 ``noembed``, ``noframes``, ``iframe``, and ``xmp``) were vulnerable | |
269 to a mutation XSS. | |
270 | |
271 This security issue was confirmed in Bleach versions v2.1.4, v3.0.2, | |
272 and v3.1.0. Earlier versions are probably affected too. | |
273 | |
274 Anyone using Bleach <=v3.1.0 is highly encouraged to upgrade. | |
275 | |
276 https://bugzilla.mozilla.org/show_bug.cgi?id=1615315 | |
277 | |
278 **Backwards incompatible changes** | |
279 | |
280 None | |
281 | |
282 **Features** | |
283 | |
284 None | |
285 | |
286 **Bug fixes** | |
287 | |
288 None | |
289 | |
290 Bleach changes | |
291 ============== | |
292 | |
293 Version 3.1.0 (January 9th, 2019) | |
294 --------------------------------- | |
295 | |
296 **Security fixes** | |
297 | |
298 None | |
299 | |
300 **Backwards incompatible changes** | |
301 | |
302 None | |
303 | |
304 **Features** | |
305 | |
306 * Add ``recognized_tags`` argument to the linkify ``Linker`` class. This | |
307 fixes issues when linkifying on its own and having some tags get escaped. | |
308 It defaults to a list of HTML5 tags. Thank you, Chad Birch! (#409) | |
309 | |
310 **Bug fixes** | |
311 | |
312 * Add ``six>=1.9`` to requirements. Thank you, Dave Shawley (#416) | |
313 | |
314 * Fix cases where attribute names could have invalid characters in them. | |
315 (#419) | |
316 | |
317 * Fix problems with ``LinkifyFilter`` not being able to match links | |
318 across ``&``. (#422) | |
319 | |
320 * Fix ``InputStreamWithMemory`` when the ``BleachHTMLParser`` is | |
321 parsing ``meta`` tags. (#431) | |
322 | |
323 * Fix doctests. (#357) | |
324 | |
325 | |
326 Version 3.0.2 (October 11th, 2018) | |
327 ---------------------------------- | |
328 | |
329 **Security fixes** | |
330 | |
331 None | |
332 | |
333 **Backwards incompatible changes** | |
334 | |
335 None | |
336 | |
337 **Features** | |
338 | |
339 None | |
340 | |
341 **Bug fixes** | |
342 | |
343 * Merge ``Characters`` tokens after sanitizing them. This fixes issues in the | |
344 ``LinkifyFilter`` where it was only linkifying parts of urls. (#374) | |
345 | |
346 | |
347 Version 3.0.1 (October 9th, 2018) | |
348 --------------------------------- | |
349 | |
350 **Security fixes** | |
351 | |
352 None | |
353 | |
354 **Backwards incompatible changes** | |
355 | |
356 None | |
357 | |
358 **Features** | |
359 | |
360 * Support Python 3.7. It supported Python 3.7 just fine, but we added 3.7 to | |
361 the list of Python environments we test so this is now officially supported. | |
362 (#377) | |
363 | |
364 **Bug fixes** | |
365 | |
366 * Fix ``list`` object has no attribute ``lower`` in ``clean``. (#398) | |
367 * Fix ``abbr`` getting escaped in ``linkify``. (#400) | |
368 | |
369 | |
370 Version 3.0.0 (October 3rd, 2018) | |
371 --------------------------------- | |
372 | |
373 **Security fixes** | |
374 | |
375 None | |
376 | |
377 **Backwards incompatible changes** | |
378 | |
379 * A bunch of functions were moved from one module to another. | |
380 | |
381 These were moved from ``bleach.sanitizer`` to ``bleach.html5lib_shim``: | |
382 | |
383 * ``convert_entity`` | |
384 * ``convert_entities`` | |
385 * ``match_entity`` | |
386 * ``next_possible_entity`` | |
387 * ``BleachHTMLSerializer`` | |
388 * ``BleachHTMLTokenizer`` | |
389 * ``BleachHTMLParser`` | |
390 | |
391 These functions and classes weren't documented and aren't part of the | |
392 public API, but people read code and might be using them so we're | |
393 considering it an incompatible API change. | |
394 | |
395 If you're using them, you'll need to update your code. | |
396 | |
397 **Features** | |
398 | |
399 * Bleach no longer depends on html5lib. html5lib==1.0.1 is now vendored into | |
400 Bleach. You can remove it from your requirements file if none of your other | |
401 requirements require html5lib. | |
402 | |
403 This means Bleach will now work fine with other libraries that depend on | |
404 html5lib regardless of what version of html5lib they require. (#386) | |
405 | |
406 **Bug fixes** | |
407 | |
408 * Fixed tags getting added when using clean or linkify. This was a | |
409 long-standing regression from the Bleach 2.0 rewrite. (#280, #392) | |
410 | |
411 * Fixed ``<isindex>`` getting replaced with a string. Now it gets escaped or | |
412 stripped depending on whether it's in the allowed tags or not. (#279) | |
413 | |
414 | |
415 Version 2.1.4 (August 16th, 2018) | |
416 --------------------------------- | |
417 | |
418 **Security fixes** | |
419 | |
420 None | |
421 | |
422 **Backwards incompatible changes** | |
423 | |
424 * Dropped support for Python 3.3. (#328) | |
425 | |
426 **Features** | |
427 | |
428 None | |
429 | |
430 **Bug fixes** | |
431 | |
432 * Handle ambiguous ampersands in correctly. (#359) | |
433 | |
434 | |
435 Version 2.1.3 (March 5th, 2018) | |
436 ------------------------------- | |
437 | |
438 **Security fixes** | |
439 | |
440 * Attributes that have URI values weren't properly sanitized if the | |
441 values contained character entities. Using character entities, it | |
442 was possible to construct a URI value with a scheme that was not | |
443 allowed that would slide through unsanitized. | |
444 | |
445 This security issue was introduced in Bleach 2.1. Anyone using | |
446 Bleach 2.1 is highly encouraged to upgrade. | |
447 | |
448 https://bugzilla.mozilla.org/show_bug.cgi?id=1442745 | |
449 | |
450 **Backwards incompatible changes** | |
451 | |
452 None | |
453 | |
454 **Features** | |
455 | |
456 None | |
457 | |
458 **Bug fixes** | |
459 | |
460 * Fixed some other edge cases for attribute URI value sanitizing and | |
461 improved testing of this code. | |
462 | |
463 | |
464 Version 2.1.2 (December 7th, 2017) | |
465 ---------------------------------- | |
466 | |
467 **Security fixes** | |
468 | |
469 None | |
470 | |
471 **Backwards incompatible changes** | |
472 | |
473 None | |
474 | |
475 **Features** | |
476 | |
477 None | |
478 | |
479 **Bug fixes** | |
480 | |
481 * Support html5lib-python 1.0.1. (#337) | |
482 | |
483 * Add deprecation warning for supporting html5lib-python < 1.0. | |
484 | |
485 * Switch to semver. | |
486 | |
487 | |
488 Version 2.1.1 (October 2nd, 2017) | |
489 --------------------------------- | |
490 | |
491 **Security fixes** | |
492 | |
493 None | |
494 | |
495 **Backwards incompatible changes** | |
496 | |
497 None | |
498 | |
499 **Features** | |
500 | |
501 None | |
502 | |
503 **Bug fixes** | |
504 | |
505 * Fix ``setup.py`` opening files when ``LANG=``. (#324) | |
506 | |
507 | |
508 Version 2.1 (September 28th, 2017) | |
509 ---------------------------------- | |
510 | |
511 **Security fixes** | |
512 | |
513 * Convert control characters (backspace particularly) to "?" preventing | |
514 malicious copy-and-paste situations. (#298) | |
515 | |
516 See `<https://github.com/mozilla/bleach/issues/298>`_ for more details. | |
517 | |
518 This affects all previous versions of Bleach. Check the comments on that | |
519 issue for ways to alleviate the issue if you can't upgrade to Bleach 2.1. | |
520 | |
521 | |
522 **Backwards incompatible changes** | |
523 | |
524 * Redid versioning. ``bleach.VERSION`` is no longer available. Use the string | |
525 version at ``bleach.__version__`` and parse it with | |
526 ``pkg_resources.parse_version``. (#307) | |
527 | |
528 * clean, linkify: linkify and clean should only accept text types; thank you, | |
529 Janusz! (#292) | |
530 | |
531 * clean, linkify: accept only unicode or utf-8-encoded str (#176) | |
532 | |
533 | |
534 **Features** | |
535 | |
536 | |
537 **Bug fixes** | |
538 | |
539 * ``bleach.clean()`` no longer unescapes entities including ones that are missing | |
540 a ``;`` at the end which can happen in urls and other places. (#143) | |
541 | |
542 * linkify: fix http links inside of mailto links; thank you, sedrubal! (#300) | |
543 | |
544 * clarify security policy in docs (#303) | |
545 | |
546 * fix dependency specification for html5lib 1.0b8, 1.0b9, and 1.0b10; thank you, | |
547 Zoltán! (#268) | |
548 | |
549 * add Bleach vs. html5lib comparison to README; thank you, Stu Cox! (#278) | |
550 | |
551 * fix KeyError exceptions on tags without href attr; thank you, Alex Defsen! | |
552 (#273) | |
553 | |
554 * add test website and scripts to test ``bleach.clean()`` output in browser; | |
555 thank you, Greg Guthe! | |
556 | |
557 | |
558 Version 2.0 (March 8th, 2017) | |
559 ----------------------------- | |
560 | |
561 **Security fixes** | |
562 | |
563 * None | |
564 | |
565 | |
566 **Backwards incompatible changes** | |
567 | |
568 * Removed support for Python 2.6. #206 | |
569 | |
570 * Removed support for Python 3.2. #224 | |
571 | |
572 * Bleach no longer supports html5lib < 0.99999999 (8 9s). | |
573 | |
574 This version is a rewrite to use the new sanitizing API since the old | |
575 one was dropped in html5lib 0.99999999 (8 9s). | |
576 | |
577 If you're using 0.9999999 (7 9s) upgrade to 0.99999999 (8 9s) or higher. | |
578 | |
579 If you're using 1.0b8 (equivalent to 0.9999999 (7 9s)), upgrade to 1.0b9 | |
580 (equivalent to 0.99999999 (8 9s)) or higher. | |
581 | |
582 * ``bleach.clean`` and friends were rewritten | |
583 | |
584 ``clean`` was reimplemented as an html5lib filter and happens at a different | |
585 step in the HTML parsing -> traversing -> serializing process. Because of | |
586 that, there are some differences in clean's output as compared with previous | |
587 versions. | |
588 | |
589 Amongst other things, this version will add end tags even if the tag in | |
590 question is to be escaped. | |
591 | |
592 * ``bleach.clean`` and friends attribute callables now take three arguments: | |
593 tag, attribute name and attribute value. Previously they only took attribute | |
594 name and attribute value. | |
595 | |
596 All attribute callables will need to be updated. | |
597 | |
598 * ``bleach.linkify`` was rewritten | |
599 | |
600 ``linkify`` was reimplemented as an html5lib Filter. As such, it no longer | |
601 accepts a ``tokenizer`` argument. | |
602 | |
603 The callback functions for adjusting link attributes now takes a namespaced | |
604 attribute. | |
605 | |
606 Previously you'd do something like this:: | |
607 | |
608 def check_protocol(attrs, is_new): | |
609 if not attrs.get('href', '').startswith('http:', 'https:')): | |
610 return None | |
611 return attrs | |
612 | |
613 Now it's more like this:: | |
614 | |
615 def check_protocol(attrs, is_new): | |
616 if not attrs.get((None, u'href'), u'').startswith(('http:', 'https:')): | |
617 # ^^^^^^^^^^^^^^^ | |
618 return None | |
619 return attrs | |
620 | |
621 Further, you need to make sure you're always using unicode values. If you | |
622 don't then html5lib will raise an assertion error that the value is not | |
623 unicode. | |
624 | |
625 All linkify filters will need to be updated. | |
626 | |
627 * ``bleach.linkify`` and friends had a ``skip_pre`` argument--that's been | |
628 replaced with a more general ``skip_tags`` argument. | |
629 | |
630 Before, you might do:: | |
631 | |
632 bleach.linkify(some_text, skip_pre=True) | |
633 | |
634 The equivalent with Bleach 2.0 is:: | |
635 | |
636 bleach.linkify(some_text, skip_tags=['pre']) | |
637 | |
638 You can skip other tags, too, like ``style`` or ``script`` or other places | |
639 where you don't want linkification happening. | |
640 | |
641 All uses of linkify that use ``skip_pre`` will need to be updated. | |
642 | |
643 | |
644 **Changes** | |
645 | |
646 * Supports Python 3.6. | |
647 | |
648 * Supports html5lib >= 0.99999999 (8 9s). | |
649 | |
650 * There's a ``bleach.sanitizer.Cleaner`` class that you can instantiate with your | |
651 favorite clean settings for easy reuse. | |
652 | |
653 * There's a ``bleach.linkifier.Linker`` class that you can instantiate with your | |
654 favorite linkify settings for easy reuse. | |
655 | |
656 * There's a ``bleach.linkifier.LinkifyFilter`` which is an htm5lib filter that | |
657 you can pass as a filter to ``bleach.sanitizer.Cleaner`` allowing you to clean | |
658 and linkify in one pass. | |
659 | |
660 * ``bleach.clean`` and friends can now take a callable as an attributes arg value. | |
661 | |
662 * Tons of bug fixes. | |
663 | |
664 * Cleaned up tests. | |
665 | |
666 * Documentation fixes. | |
667 | |
668 | |
669 Version 1.5 (November 4th, 2016) | |
670 -------------------------------- | |
671 | |
672 **Security fixes** | |
673 | |
674 * None | |
675 | |
676 **Backwards incompatible changes** | |
677 | |
678 * clean: The list of ``ALLOWED_PROTOCOLS`` now defaults to http, https and | |
679 mailto. | |
680 | |
681 Previously it was a long list of protocols something like ed2k, ftp, http, | |
682 https, irc, mailto, news, gopher, nntp, telnet, webcal, xmpp, callto, feed, | |
683 urn, aim, rsync, tag, ssh, sftp, rtsp, afs, data. #149 | |
684 | |
685 **Changes** | |
686 | |
687 * clean: Added ``protocols`` to arguments list to let you override the list of | |
688 allowed protocols. Thank you, Andreas Malecki! #149 | |
689 | |
690 * linkify: Fix a bug involving periods at the end of an email address. Thank you, | |
691 Lorenz Schori! #219 | |
692 | |
693 * linkify: Fix linkification of non-ascii ports. Thank you Alexandre, Macabies! | |
694 #207 | |
695 | |
696 * linkify: Fix linkify inappropriately removing node tails when dropping nodes. | |
697 #132 | |
698 | |
699 * Fixed a test that failed periodically. #161 | |
700 | |
701 * Switched from nose to py.test. #204 | |
702 | |
703 * Add test matrix for all supported Python and html5lib versions. #230 | |
704 | |
705 * Limit to html5lib ``>=0.999,!=0.9999,!=0.99999,<0.99999999`` because 0.9999 | |
706 and 0.99999 are busted. | |
707 | |
708 * Add support for ``python setup.py test``. #97 | |
709 | |
710 | |
711 Version 1.4.3 (May 23rd, 2016) | |
712 ------------------------------ | |
713 | |
714 **Security fixes** | |
715 | |
716 * None | |
717 | |
718 **Changes** | |
719 | |
720 * Limit to html5lib ``>=0.999,<0.99999999`` because of impending change to | |
721 sanitizer api. #195 | |
722 | |
723 | |
724 Version 1.4.2 (September 11, 2015) | |
725 ---------------------------------- | |
726 | |
727 **Changes** | |
728 | |
729 * linkify: Fix hang in linkify with ``parse_email=True``. #124 | |
730 | |
731 * linkify: Fix crash in linkify when removing a link that is a first-child. #136 | |
732 | |
733 * Updated TLDs. | |
734 | |
735 * linkify: Don't remove exterior brackets when linkifying. #146 | |
736 | |
737 | |
738 Version 1.4.1 (December 15, 2014) | |
739 --------------------------------- | |
740 | |
741 **Changes** | |
742 | |
743 * Consistent order of attributes in output. | |
744 | |
745 * Python 3.4 support. | |
746 | |
747 | |
748 Version 1.4 (January 12, 2014) | |
749 ------------------------------ | |
750 | |
751 **Changes** | |
752 | |
753 * linkify: Update linkify to use etree type Treewalker instead of simpletree. | |
754 | |
755 * Updated html5lib to version ``>=0.999``. | |
756 | |
757 * Update all code to be compatible with Python 3 and 2 using six. | |
758 | |
759 * Switch to Apache License. | |
760 | |
761 | |
762 Version 1.3 | |
763 ----------- | |
764 | |
765 * Used by Python 3-only fork. | |
766 | |
767 | |
768 Version 1.2.2 (May 18, 2013) | |
769 ---------------------------- | |
770 | |
771 * Pin html5lib to version 0.95 for now due to major API break. | |
772 | |
773 | |
774 Version 1.2.1 (February 19, 2013) | |
775 --------------------------------- | |
776 | |
777 * ``clean()`` no longer considers ``feed:`` an acceptable protocol due to | |
778 inconsistencies in browser behavior. | |
779 | |
780 | |
781 Version 1.2 (January 28, 2013) | |
782 ------------------------------ | |
783 | |
784 * ``linkify()`` has changed considerably. Many keyword arguments have been | |
785 replaced with a single callbacks list. Please see the documentation for more | |
786 information. | |
787 | |
788 * Bleach will no longer consider unacceptable protocols when linkifying. | |
789 | |
790 * ``linkify()`` now takes a tokenizer argument that allows it to skip | |
791 sanitization. | |
792 | |
793 * ``delinkify()`` is gone. | |
794 | |
795 * Removed exception handling from ``_render``. ``clean()`` and ``linkify()`` may | |
796 now throw. | |
797 | |
798 * ``linkify()`` correctly ignores case for protocols and domain names. | |
799 | |
800 * ``linkify()`` correctly handles markup within an <a> tag. | |
801 | |
802 | |
803 Version 1.1.5 | |
804 ------------- | |
805 | |
806 | |
807 Version 1.1.4 | |
808 ------------- | |
809 | |
810 | |
811 Version 1.1.3 (July 10, 2012) | |
812 ----------------------------- | |
813 | |
814 * Fix parsing bare URLs when parse_email=True. | |
815 | |
816 | |
817 Version 1.1.2 (June 1, 2012) | |
818 ---------------------------- | |
819 | |
820 * Fix hang in style attribute sanitizer. (#61) | |
821 | |
822 * Allow ``/`` in style attribute values. | |
823 | |
824 | |
825 Version 1.1.1 (February 17, 2012) | |
826 --------------------------------- | |
827 | |
828 * Fix tokenizer for html5lib 0.9.5. | |
829 | |
830 | |
831 Version 1.1.0 (October 24, 2011) | |
832 -------------------------------- | |
833 | |
834 * ``linkify()`` now understands port numbers. (#38) | |
835 | |
836 * Documented character encoding behavior. (#41) | |
837 | |
838 * Add an optional target argument to ``linkify()``. | |
839 | |
840 * Add ``delinkify()`` method. (#45) | |
841 | |
842 * Support subdomain whitelist for ``delinkify()``. (#47, #48) | |
843 | |
844 | |
845 Version 1.0.4 (September 2, 2011) | |
846 --------------------------------- | |
847 | |
848 * Switch to SemVer git tags. | |
849 | |
850 * Make ``linkify()`` smarter about trailing punctuation. (#30) | |
851 | |
852 * Pass ``exc_info`` to logger during rendering issues. | |
853 | |
854 * Add wildcard key for attributes. (#19) | |
855 | |
856 * Make ``linkify()`` use the ``HTMLSanitizer`` tokenizer. (#36) | |
857 | |
858 * Fix URLs wrapped in parentheses. (#23) | |
859 | |
860 * Make ``linkify()`` UTF-8 safe. (#33) | |
861 | |
862 | |
863 Version 1.0.3 (June 14, 2011) | |
864 ----------------------------- | |
865 | |
866 * ``linkify()`` works with 3rd level domains. (#24) | |
867 | |
868 * ``clean()`` supports vendor prefixes in style values. (#31, #32) | |
869 | |
870 * Fix ``linkify()`` email escaping. | |
871 | |
872 | |
873 Version 1.0.2 (June 6, 2011) | |
874 ---------------------------- | |
875 | |
876 * ``linkify()`` supports email addresses. | |
877 | |
878 * ``clean()`` supports callables in attributes filter. | |
879 | |
880 | |
881 Version 1.0.1 (April 12, 2011) | |
882 ------------------------------ | |
883 | |
884 * ``linkify()`` doesn't drop trailing slashes. (#21) | |
885 * ``linkify()`` won't linkify 'libgl.so.1'. (#22) | |
886 | |
887 |