Products.PortalTransforms 2.1.2 - Changelog

What's new in Products.PortalTransforms 2.1.2:

January 8th, 2013

· Adjust safe_html transform to block various XSS vulnerabilities. This fixes https://plone.org/products/plone/security/advisories/20121106/18 [davisagli]

What's new in Products.PortalTransforms 2.0.7:

July 5th, 2011

· In the safe_html transform, abort parsing if a broken declaration is found. [evilbungle, davisagli]
· In the safe_html transform, remove data URIs. [davisagli]
· In the safe_html transform, ignore null bytes when checking for unsafe attributes with scripts. [davisagli]

What's new in Products.PortalTransforms 2.0.5:

February 27th, 2011

· Fix regression due to the security declarations added in 2.0.4: convertTo should still be public, but not publishable. [davisagli]

What's new in Products.PortalTransforms 2.0.3:

November 25th, 2010

· Fix manage_options which accidentally got turned into a tuple in some refactoring. [swampmonkey]
· Added missing url metadata. [hannosch]

What's new in Products.PortalTransforms 2.0.2:

October 28th, 2010

· Close < p > tags properly in configureTransform.zpt. [swampmonkey]
· Add HTML5 tags as valid: article, aside, audio, canvas, command, datalist, details, figcaption, figure, footer, header, hgroup, keygen, mark, rp, rt, ruby, section, source, summary, time, video. [limi]