Subject: CVS commit: pkgsrc/textproc/py-html-sanitizer
From: Adam Ciarcinski
Date: 2022-11-30 17:43:32
Message id: 20221130164332.81DB8FA90@cvs.NetBSD.org

Log Message:
py-html-sanitizer: updated to 1.9.3

1.9 (2020-01-20)

Added Python 3.8 to the CI matrix.
Be able to keep the <style> tag by adding it to tags.
Added a style check to the CI matrix.

1.8 (2019-11-21)

Actually added support for customizing lxml's autolinking behavior using a \ 
dictionary argument.
Stopped removing explicitly allowed attributes.
Removed id from allowed attributes of <a> tags to provide an additional \ 
layer of defense against DOM clobbering attacks.
Added an element preprocessor which assigns the id value to the name attribute \ 
of anchors if name isn't set or empty. This should provide additional backwards \ 
compatibility making the id removal less of a problem when using named anchors.

1.7 (2019-02-19)

Added a system check which validates sanitizer configurations early when using \ 
Django.
Fixed an edge case where passing in an empty allowed tags list would \ 
unexpectedly and silently not remove any tags at all (because that's the way \ 
lxml's cleaner works).
Changed the sanitizer tags, empty and separate options to also accept any \ 
iterable, not just sets.
Changed the lru_cache import in the Django module to try functools first.
Fixed the tag merging to also check tags in empty. This means that e.g. \ 
consecutive <hr> tags are also merged now when using the default settings.
Made it possible to override the set of tags processed as whitespace. The \ 
default set is {"br"} which preserves the current behavior of \ 
stripping breaks from the beginning or end of tags' content.

Files:
RevisionActionfile
1.8modifypkgsrc/textproc/py-html-sanitizer/Makefile
1.8modifypkgsrc/textproc/py-html-sanitizer/distinfo