News

I assure you, this has never happened before to HTML Purifier; never before have we had a release candidate. I assure you, there is something big with this release, and that's why I am painstakingly doing a release candidate before the official 3.1 series begins.

To read more about it, please check out the 3.1.0rc1 release candidate page.

Release 3.0.0 is the first release of 2008 and also HTML Purifier's first PHP 5 only release. The 2.1 series will still be supported for bug and security fixes, but will not get new features. This release a number of improvements in CSS handling, including the filter HTMLPurifier_Filter_ExtractStyleBlocks which integrates HTML Purifier with CSSTidy for cleaning style sheets (see the source code file for more information on usage), contains experimental support for proprietary CSS properties with %CSS.Proprietary, case-insensitive CSS properties, and more lenient hexadecimal color codes. Also, all code has been upgraded to full PHP 5 and is E_STRICT clean for all versions of PHP 5 (including the 5.0 series, which previously had parse-time errors).

See NEWS for a complete changelog.

Stability release 2.1.3 fixes a slew of minor bugs found in HTML Purifier, and also includes some internal code enhancements and refactorings. Notably, tests/multitest.php automates testing in multiple versions, fatal AttrDef_URI_Email error fixed, blockquote contents are more lenient in HTML 4.01 Strict and fatal errors involving ID tags in img tags were fixed.

See NEWS for a complete changelog.

Version 2.1.2 is a mix of experimental features and stability updates. Among new features: an Object module for trusted users, support for the CSS property 'border-spacing', and HTML 5 style parsing using PH5P. Bug fixes have resolved a few obscure issues including border-collapse:seperate, a DirectLex parsing error, broken HTML in printDefinition.php, and problems with the experimental standalone distribution. Also, there were large amounts of behind-the-scenes refactoring and the removal of URIScheme inclusion reflection.

The new PH5P feature is especially exciting, and can be tested at the demo with the experimental flag. You can enable it using:

require_once 'HTMLPurifier/Lexer/PH5P.php';
$config->set('Core', 'LexerImpl', 'PH5P');

Be sure to report bugs! And of course, see NEWS for a complete changelog.

It looks like I'm going to have to start making release candidates before I release new major versions. There were three show-stopper bugs for version 2.1.0:

• The PHP5-strict version was missing a lot of new features due to a botched merge, making it functionally equivalent to the previous 2.0.1 release.
• The new %URI.MakeAbsolute feature, the flagship of the new URI system, just didn't work due to a slight misordering of two method calls.
• The new standalone distribution did not work on PHP4 because a PHP5 specific file was inlined, resulting in a parse error.

All of these issues have been fixed and our release strategy has been amended to ensure that it does not happen again. See NEWS for a complete changelog, though not much else changed in this version.

In version 2.1, HTML Purifier's URI validation and filtering handling system has been revamped with a new, extensible URIFilter system. Also notable features include preservation of emoticons in PHP5 with %Core.AggressivelyFixLt, standalone and lite download versions, transforming relative URIs to absolute URIs, Ruby in XHTML 1.1 and UTF-8 font names. Notable bug-fixes include refinement of the auto-paragraphing algorithm (no longer experimental), better XHTML 1.1 support and the removal of the contents of <style> elements.

Update: It has come to my attention that there is a bug with the %URI.MakeAbsolute functionality; apply a patch to fix the problem, or wait until the next version.

As usual, see NEWS for a complete changelog.

Nightly builds are now available for HTML Purifier, you can get them here: Nightly Builds. Be sure to check out the Standalone version: it's essentially HTML Purifier in one file.