diff options
author | Stan Hu <stanhu@gmail.com> | 2016-03-24 22:39:58 -0700 |
---|---|---|
committer | Stan Hu <stanhu@gmail.com> | 2016-05-06 23:20:24 -0700 |
commit | 21d89d0286e385d6d0a4debdbf7c801939c3e279 (patch) | |
tree | b1b0190c153ae9bccb552f60a4dbf4e80edd56e0 /CHANGELOG | |
parent | 2e1162272e2f90a3677f3def491907729b249434 (diff) | |
download | gitlab-ce-21d89d0286e385d6d0a4debdbf7c801939c3e279.tar.gz |
Update SVG sanitizer to conform to SVG 1.1
Use a custom Loofah scrubber since sanitize 2.x transformers are inadequate
to handle case-sensitive SVG attributes. sanitize parses documents as HTML
instead of XML, which causes all SVG attribute names (e.g. viewBox) to be downcased.
* SVG element list: https://www.w3.org/TR/SVG/eltindex.html
* SVG attribute list: https://www.w3.org/TR/SVG/attindex.html
Closes #14555
Diffstat (limited to 'CHANGELOG')
-rw-r--r-- | CHANGELOG | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG index 78d6c1ec2b2..55de2533245 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -15,6 +15,7 @@ v 8.8.0 (unreleased) - Use ActionDispatch Remote IP for Akismet checking - Fix error when visiting commit builds page before build was updated - Add 'l' shortcut to open Label dropdown on issuables and 'i' to create new issue on a project + - Update SVG sanitizer to conform to SVG 1.1 - Updated search UI - Display informative message when new milestone is created - Allow "NEWS" and "CHANGES" as alternative names for CHANGELOG. !3768 (Connor Shea) |