./www/py-bleach, Easy whitelist-based HTML-sanitizing tool

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 3.1.0, Package name: py27-bleach-3.1.0, Maintainer: ryoon

Bleach is an HTML sanitizing library that escapes or strips markup
and attributes based on a white list. Bleach can also linkify text
safely, applying filters that Django's ``urlize`` filter cannot,
and optionally setting ``rel`` attributes, even on links already
in the text.


Required to run:
[devel/py-setuptools] [lang/python27] [lang/py-six] [textproc/py-webencodings]

Required to build:
[pkgtools/cwrappers] [devel/py-test-runner]

Master sites:

SHA1: b44b7705a1425338cf429d66f009aa15d09b768d
RMD160: aa1bda9144a52123e900452e78325da2090cbded
Filesize: 163.881 KB

Version history: (Expand)


CVS history: (Expand)


   2019-01-21 13:23:39 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-bleach: updated to 3.1.0

Version 3.1.0:
**Features**
* Add recognized_tags argument to the linkify Linker class. This
  fixes issues when linkifying on its own and having some tags get escaped.
  It defaults to a list of HTML5 tags.

**Bug fixes**
* Add six>=1.9 to requirements.
* Fix cases where attribute names could have invalid characters in them.
* Fix problems with LinkifyFilter not being able to match links
  across &.
* Fix InputStreamWithMemory when the BleachHTMLParser is
  parsing meta tags.
* Fix doctests.
   2018-10-30 10:48:29 by Hauke Fath | Files touched by this commit (1)
Log message:
Deal with gratuitous use of "/bin/bash" (in a one-line script, no
less).
   2018-10-26 11:11:54 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-bleach: updated to 3.0.2

Version 3.0.2:

Bug fixes

 Merge Characters tokens after sanitizing them. This fixes issues in the
  LinkifyFilter where it was only linkifying parts of urls.

Version 3.0.1:

Features

 Support Python 3.7. It supported Python 3.7 just fine, but we added 3.7 to
  the list of Python environments we test so this is now officially supported.

Bug fixes

 Fix list object has no attribute lower in clean.
 Fix abbr getting escaped in linkify.

Version 3.0.0:

Backwards incompatible changes

 A bunch of functions were moved from one module to another.

  These were moved from bleach.sanitizer to bleach.html5lib_shim:

   convert_entity
   convert_entities
   match_entity
   next_possible_entity
   BleachHTMLSerializer
   BleachHTMLTokenizer
   BleachHTMLParser

  These functions and classes weren't documented and aren't part of the
  public API, but people read code and might be using them so we're
  considering it an incompatible API change.

  If you're using them, you'll need to update your code.

Features

 Bleach no longer depends on html5lib. html5lib==1.0.1 is now vendored into
  Bleach. You can remove it from your requirements file if none of your other
  requirements require html5lib.

  This means Bleach will now work fine with other libraries that depend on
  html5lib regardless of what version of html5lib they require.

Bug fixes
 Fixed tags getting added when using clean or linkify. This was a
  long-standing regression from the Bleach 2.0 rewrite.

 Fixed <isindex> getting replaced with a string. Now it gets escaped or
  stripped depending on whether it's in the allowed tags or not.
   2018-10-02 11:02:09 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-bleach: updated to 2.1.4

Version 2.1.4:
Dropped support for Python 3.3.
Handle ambiguous ampersands in correctly.
   2018-04-09 14:14:19 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-bleach: updated to 2.1.3

Version 2.1.3:

**Security fixes**
* Attributes that have URI values weren't properly sanitized if the
  values contained character entities. Using character entities, it
  was possible to construct a URI value with a scheme that was not
  allowed that would slide through unsanitized.

  This security issue was introduced in Bleach 2.1. Anyone using
  Bleach 2.1 is highly encouraged to upgrade.

**Bug fixes**
* Fixed some other edge cases for attribute URI value sanitizing and
  improved testing of this code.
   2017-12-10 17:56:51 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-bleach: updated to 2.1.2

Version 2.1.2:
Bug fixes
* Support html5lib-python 1.0.1.
* Add deprecation warning for supporting html5lib-python < 1.0.
* Switch to semver.
   2017-10-05 14:58:48 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-bleach: update to 2.1.1

Version 2.1.1:
**Bug fixes**
* Fix ``setup.py`` opening files when ``LANG=``.

Version 2.1:
**Security fixes**
* Convert control characters (backspace particularly) to "?" preventing
  malicious copy-and-paste situations.
  See `<https://github.com/mozilla/bleach/issues/298>`_ for more details.
  This affects all previous versions of Bleach. Check the comments on that
  issue for ways to alleviate the issue if you can't upgrade to Bleach 2.1.

**Backwards incompatible changes**
* Redid versioning. ``bleach.VERSION`` is no longer available. Use the string
  version at ``bleach.__version__`` and parse it with
  ``pkg_resources.parse_version``.
* clean, linkify: linkify and clean should only accept text types
* clean, linkify: accept only unicode or utf-8-encoded str

**Bug fixes**
* ``bleach.clean()`` no longer unescapes entities including ones that are missing
  a ``;`` at the end which can happen in urls and other places.
* linkify: fix http links inside of mailto links
* clarify security policy in docs
* fix dependency specification for html5lib 1.0b8, 1.0b9, and 1.0b10
* add Bleach vs. html5lib comparison to README
* fix KeyError exceptions on tags without href attr
* add test website and scripts to test ``bleach.clean()`` output in browser
   2017-04-23 06:09:15 by Mark Davies | Files touched by this commit (3) | Package updated
Log message:
Update py-bleach to 2.0.0

* Supports Python 3.6.

* Supports html5lib >= 0.99999999 (8 9s).

* There's a ``bleach.sanitizer.Cleaner`` class that you can instantiate with your
  favorite clean settings for easy reuse.

* There's a ``bleach.linkifier.Linker`` class that you can instantiate with your
  favorite linkify settings for easy reuse.

* There's a ``bleach.linkifier.LinkifyFilter`` which is an htm5lib filter that
  you can pass as a filter to ``bleach.sanitizer.Cleaner`` allowing you to clean
  and linkify in one pass.

* ``bleach.clean`` and friends can now take a callable as an attributes arg value.

* Tons of bug fixes.

* Cleaned up tests.

* Documentation fixes.