This project publishes no release notes. Between 2.4.3 and 2.4.4 there were 3 commits, 3 of them substantive:

• Use an early return, it's easier to read
• Fix the strange whitespace handling of tails when merging elements
• html-sanitizer 2.4.4

This project publishes no release notes. Between 2.4.2 and 2.4.3 there were 4 commits, 4 of them substantive:

• Add a failing unittest for #44
• Reformat the pyproject.toml
• Fix #44: Fix an edge case while merging tags
• html-sanitizer 2.4.3

This project publishes no release notes. Between 2.4.1 and 2.4.2 there were 2 commits, 2 of them substantive:

• Normalize unicode earlier
• html-sanitizer 2.4.2

This project publishes no release notes. Between 2.3.1 and 2.4.1 there were 4 commits, 4 of them substantive:

• Use dependency lxml[html_clean] (#39)
• html-sanitizer 2.4
• Drop lxml[html_clean] and use lxml_html_clean (#41)
• html-sanitizer 2.4.1

• Fixed an edge case where br tag attributes weren't removed if the br tag appears first.

• Updated the lxml dependency to 5.2 and added the now-required lxml[html_clean] extra.

This project publishes no release notes. Between 1.9.3 and 2.3.1 there were 24 commits, 23 of them substantive:

• Add pre-commit
• Update our lxml dependency because of strange changes in cleaning output
• Remove the lint action
• Update hooks
• Newer Python versions
• Modernize
• Manually overriding all whitespace replacement if someone wants to keep Typographic whitespaces (#24)
• Make ruff happier
• CHANGELOG, version updates
• This is necessary
• html-sanitizer 2.0
• Disallow unexpected data types
• html-sanitizer 2.1
• Whitespaces are mantained even after a tag (#32)
• html-sanitizer 2.2
• Refs #34: Add a test for the <img> tag
• Hmm
• Hooks
• Add another whitespace preservation test
• Prevent space between merged tags of the same type (#36)

…and 3 more.

• Avoided adding whitespace when merging tags of the same type.

• Updated the tests.

• Switched from black to the ruff formatter.

• Changed keep_normalized_whitespace to preserve whitespace at the tail of tags, not just between tags.

• Changed the parameters of normalize_whitespace_in_text_or_tail to be keyword-only.

• Added a test for a type of misconfiguration.

• Changed the sanitizer configuration validation to not allow unexpected data types in tags, empty, separate, whitespace and attributes.

• Raised the minimum Python version to 3.7. Added Python 3.10, 3.11.

• Raised the minimum lxml version to the current 4.9.1.

• Switched from Travis CI to GitHub actions. Added Python 3.9 to the CI matrix.

• Renamed the main branch to main.

• Switched to a declarative setup.

• Fixed a whitespace dependency in the testsuite.

• Switched to hatchling and ruff.

• Made behavior-altering arguments to normalize_overall_whitespace keyword-only.

This project publishes no release notes. Between 1.9.2 and 1.9.3 there were 2 commits, 2 of them substantive:

• Fix #21: Change a overspecific test to not depend on the amount of whitespace
• HTML sanitizer 1.9.3

This project publishes no release notes. Between 1.9.1 and 1.9.2 there were 17 commits, 17 of them substantive:

• Add Python 3.9 to the matrix
• Run black again
• Create test.yml
• Update test.yml
• Drop support for Python 2.7
• Run tests using -m unittest
• Add a linting workflow
• Remove the subTest-unavailable fallback, subTest is always available now that we dropped old Python versions
• Add security-related tests, just to try out what happens
• List markers: Leave non-breaking spaces alone
• One less complaint
• Declarative setup, raise a few minimum versions
• Just use tox -e style for linting on GitHub too
• Add Python 3.10
• Test the sanitization of data attributes
• Bump the lxml dependency because of a security issue
• HTML sanitizer 1.9.2

This project publishes no release notes. Between 1.7.3 and 1.9.1 there were 22 commits, 18 of them substantive:

• Drop Python 3.4 from Travis
• Fix DOM Clobbering
• Convert @id to @name on anchors
• Add my email to the README for potential security problems
• HTML sanitizer 1.8
• Optionally remove style tags
• test python 3.8
• add changelog line
• don't change line that's not mine
• Report missing lines instead of generating HTML
• Blackify the code once
• Mention Python 3.8 in the CHANGELOG
• Test what happens with style attributes when allowing style tags
• Add a style checking step
• Install flake8 and black before checking the code...
• HTML sanitizer 1.9
• Regex should be compiled
• HTML sanitizer 1.9.1

• Added Python 3.8 to the CI matrix.

• Be able to keep the <style> tag by adding it to tags.

• Added a style check to the CI matrix.

• Actually added support for customizing lxml's autolinking behavior using a dictionary argument.

• Stopped removing explicitly allowed attributes.

• Removed id from allowed attributes of <a> tags to provide an additional layer of defense against DOM clobbering attacks.

• Added an element preprocessor which assigns the id value to the name attribute of anchors if name isn't set or empty. This should provide additional backwards compatibility making the id removal less of a problem when using named anchors.

This project publishes no release notes. Between 1.7.2 and 1.7.3 there were 5 commits, 4 of them substantive:

• Allow to keep typographic whitespace.
• Blackified code.
• Use Unicode regex in Python 2.
• HTML sanitizer 1.7.3

• Added a system check which validates sanitizer configurations early when using Django.

• Fixed an edge case where passing in an empty allowed tags list would unexpectedly and silently not remove any tags at all (because that's the way lxml's cleaner works).

• Changed the sanitizer tags, empty and separate options to also accept any iterable, not just sets.

• Changed the lru_cache import in the Django module to try functools first.

• Fixed the tag merging to also check tags in empty. This means that e.g. consecutive <hr> tags are also merged now when using the default settings.

• Made it possible to override the set of tags processed as whitespace. The default set is {"br"} which preserves the current behavior of stripping breaks from the beginning or end of tags' content.

• Fixed another edge case where a tag which is allowed to be empty was erroneously removed if it contained not only whitespace but also a <br> tag.

• Fixed a few edge whitespace normalization edge cases and a bug where removing an empty tag removed all whitespace.

• Added black for automatically formatting the Python code.

• By default, links with target="_blank" get an additional rel="noopener" attribute (Article by Mathias Bynens). If you're overriding the list of allowed attributes for anchor tags you must add rel to your list.

• Corrected the required lxml version in install_requires.

• Added comments and testing for more edge cases.

• Changed the cleaner to not drop form elements; instead, <form> is converted to <p>, and form elements are preserved.

• Added an is_mergeable hook for conditionally preventing the merging of adjacent elements.

• Fixed a case where paragraphs were allowed inside paragraphs (which was never the idea).

• Fixed a case where tags with content between them were erroneously merged.

• Added a tox.ini file for running style checks and tests.

• Replaced REPLACEMENTS and element_filters with the more general element_preprocessors and element_postprocessors settings.

• Removed the restriction that <span> tags are never allowed.

• Fixed the erroneous removal of all whitespace between adjacent elements.

• Fixed a few occasions where <br> tags were erroneously removed.

• Back to beautifulsoup4 for especially broken HTML respectively HTML with Emojis on macOS.

• Used a <div> instead of <anything> to wrap the document (since beautifulsoup4 does not like custom tags too much)

• Added html_sanitizer.django.get_sanitizer to provide an official way of configuring HTML sanitizers using Django settings.

• Initial public release.