All pull requests

Pull requests

• [5.x] Add native types to the filter API and stop mutating arguments

  #114·Hackwar opened Nov 12, 2026Contributor·

  ·

• [5.x] Remove commas in OutputFilter::stringUrlUnicodeSlug()

  #113·Hackwar opened Nov 12, 2026Contributor·

  ·

• [5.x] Add the update guide for 5.0

  #112·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Prefer stable dependency versions

  #111·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Escape CSV values starting with a tab or carriage return

  #110·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Transliterate the prepared string in stringUrlSafe() without a Language

  #109·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Accept null in OutputFilter::cleanText() and escape single quotes

  #108·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Return an integer from the UINT filter for PHP_INT_MIN

  #107·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Fix stripCssExpressions() checks and block the behavior CSS property

  #106·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Keep allowed attributes without a value and validate attribute names

  #105·Hackwar opened Nov 12, 2026Contributor·

  ·

• [4.x] Check data: URIs on the decoded attribute value and stop mangling attribute values

  #104·Hackwar opened Nov 12, 2026Contributor·

  ·

• Improve whitespace handling in alias formatting

  #100·brianteeman opened Oct 2, 2026Contributor·

  ·

• match multiline tags in stripImages and stripIframes

  #97·arib06 opened Aug 27, 2026Contributor·

  ·

• reject parent-directory traversal segment in cleanPath

  #96·arib06 opened Aug 26, 2026Contributor·

  ·

• strip tab in attribute value to block tabbed data:text/html uri

  #93·arib06 opened Aug 24, 2026Contributor·

  ·

• block &newline; entity in attribute filter to stop javascript: bypass

  #89·arib06 opened Aug 19, 2026Contributor·

  ·

• [3.x] Fixed comma not stripped in stringUrlUnicodeSlug

  #85·krishnagandhicode opened May 18, 2026·

  ·
  6

  

• [3.x] Fix for allowing property which begins with an underscore

  #71·1Jesper1 opened Jul 31, 2024Contributor·

  ·
  4

• Custom test to demonstrate everything breaks

  #15·wilsonge opened Nov 11, 2015Contributor·

  ·
  9