1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.0 Transitional//EN"
3 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
5 xmlns=
"http://www.w3.org/1999/xhtml"
6 xmlns:
xi=
"http://www.w3.org/2001/XInclude"
7 xmlns:
xc=
"urn:xhtml-compiler"
11 <title>HTML Purifier
4.4.0 released - News - HTML Purifier
</title>
12 <xi:include href=
"common-meta.xml" xpointer=
"xpointer(/*/node())" />
16 <xi:include href=
"common-header.xml" xpointer=
"xpointer(/*/node())" />
19 <h1 id=
"title">HTML Purifier
4.4.0 released
</h1>
23 HTML Purifier
4.4.0 is a minor security release addressing a security
24 vulnerability associated with some optional functionality. It also
25 contains an accumulation of new features and bugfixes over half a year.
26 New configuration options include %HTML.TargetBlank,
27 %HTML.AllowedComments, %HTML.AllowedCommentsRegexp, %HTML.SafeIframe,
28 %URI.SafeIframeRegexp, %Core.EnableIDNA (requires PEAR Net_IDNA2 module and
29 doesn't work for PHP
5.0.5). We also now support the 'scope' attribute on
34 href=
"http://repo.or.cz/w/htmlpurifier.git/blob/17af0e4fc127e5ba7c7faee4eea194903bdcd53f:/NEWS">NEWS
</a>
35 for a complete changelog. There are some minor, backwards
36 incompatible changes, which we don't expect users to notice.