Comments (8)
Hi @mayesgr, sorry for the confusion here. This feature isn't in a release yet -- see https://github.com/rails/rails-html-sanitizer/blob/master/CHANGELOG.md for that information.
I'll try to cut a release this week with this feature in it.
from rails-html-sanitizer.
Hey @flavorjones any sign of that release? We lost some time to the fact that the README is updated but the release is not. No worries if it's still stalled, but perhaps revert the changes to the README to avoid confusion for others?
from rails-html-sanitizer.
@jalada Thanks for the poke. I've been delaying because there's a security release that's close to shipping and I want to get that out before a feature release. If it doesn't come together in the next few days I'll ship the feature release.
from rails-html-sanitizer.
This is delayed a bit while I validate and triage a vulnerability report. Thanks for your patience.
from rails-html-sanitizer.
Security release is getting closer, apologies again for delaying this feature release.
from rails-html-sanitizer.
Hi there @flavorjones!
Echoing @jalada's comment - I've been trying to make this work at a rails console for a while, only to finally compare the gem source and the repo source, and spot the gap. Even if you just note in the README that it's not released yet, that would be helpful.
Obvi the best outcome would be for the pruning to be released. How's the security release coming?
Thank you for your maintenance work
from rails-html-sanitizer.
Thanks for the nudge. The security release went out last month but I didn't circle back to this feature release. I'll do that now!
from rails-html-sanitizer.
Done! https://github.com/rails/rails-html-sanitizer/releases/tag/v1.5.0
from rails-html-sanitizer.
Related Issues (20)
- Nuanced rules when santising? (to enable other attributes like target + rel) HOT 4
- Unable to whitelist css variables HOT 1
- iframe are scrubbed by default? HOT 3
- test failures against current loofah/nokogiri HOT 6
- PermitScrubber treats ProcessingInstructions as Elements HOT 2
- `strip_tags(input).html_safe? # => false to true` ? HOT 8
- test failures when using loofah 2.13.0 and nokogiri 1.12.5 HOT 7
- Explore test failures with nokogiri v1.13.2 HOT 1
- Change in behavior caused by Nokogiri 1.13.5 HOT 2
- xss vulnerability in data URI HOT 2
- allow script tag HOT 3
- WhiteListSanitizer is sanitizing some contents of allowed attribute HOT 2
- Loading order is causing issues HOT 9
- Private reporting of a potential security vulnerability HOT 6
- In the sanitize method, the value of the `multiple` attribute of the html tag is missing. HOT 2
- Please add required_ruby_version to gemspec HOT 3
- Add an option to use `to_text` instead of `to_html` to `FullSanitizer` HOT 13
- The sanitization method changes the tag structure if there is a `<table>` tag inside an `<a>` tag. HOT 3
- Should 'class' be removed from the default safe list for attributes? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rails-html-sanitizer.