| Current File : //opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rexml-3.3.6/NEWS.md |
# News
## 3.3.6 - 2024-08-22 {#version-3-3-6}
### Improvements
* Removed duplicated entity expansions for performance.
* GH-194
* Patch by Viktor Ivarsson.
* Improved namespace conflicted attribute check performance. It was
too slow for deep elements.
* Reported by l33thaxor.
### Fixes
* Fixed a bug that default entity expansions are counted for
security check. Default entity expansions should not be counted
because they don't have a security risk.
* GH-198
* GH-199
* Patch Viktor Ivarsson
* Fixed a parser bug that parameter entity references in internal
subsets are expanded. It's not allowed in the XML specification.
* GH-191
* Patch by NAITOH Jun.
* Fixed a stream parser bug that user-defined entity references in
text aren't expanded.
* GH-200
* Patch by NAITOH Jun.
### Thanks
* Viktor Ivarsson
* NAITOH Jun
* l33thaxor
## 3.3.5 - 2024-08-12 {#version-3-3-5}
### Fixes
* Fixed a bug that `REXML::Security.entity_expansion_text_limit`
check has wrong text size calculation in SAX and pull parsers.
* GH-193
* GH-195
* Reported by Viktor Ivarsson.
* Patch by NAITOH Jun.
### Thanks
* Viktor Ivarsson
* NAITOH Jun
## 3.3.4 - 2024-08-01 {#version-3-3-4}
### Fixes
* Fixed a bug that `REXML::Security` isn't defined when
`REXML::Parsers::StreamParser` is used and
`rexml/parsers/streamparser` is only required.
* GH-189
* Patch by takuya kodama.
### Thanks
* takuya kodama
## 3.3.3 - 2024-08-01 {#version-3-3-3}
### Improvements
* Added support for detecting invalid XML that has unsupported
content before root element
* GH-184
* Patch by NAITOH Jun.
* Added support for `REXML::Security.entity_expansion_limit=` and
`REXML::Security.entity_expansion_text_limit=` in SAX2 and pull
parsers
* GH-187
* Patch by NAITOH Jun.
* Added more tests for invalid XMLs.
* GH-183
* Patch by Watson.
* Added more performance tests.
* Patch by Watson.
* Improved parse performance.
* GH-186
* Patch by tomoya ishida.
### Thanks
* NAITOH Jun
* Watson
* tomoya ishida
## 3.3.2 - 2024-07-16 {#version-3-3-2}
### Improvements
* Improved parse performance.
* GH-160
* Patch by NAITOH Jun.
* Improved parse performance.
* GH-169
* GH-170
* GH-171
* GH-172
* GH-173
* GH-174
* GH-175
* GH-176
* GH-177
* Patch by Watson.
* Added support for raising a parse exception when an XML has extra
content after the root element.
* GH-161
* Patch by NAITOH Jun.
* Added support for raising a parse exception when an XML
declaration exists in wrong position.
* GH-162
* Patch by NAITOH Jun.
* Removed needless a space after XML declaration in pretty print mode.
* GH-164
* Patch by NAITOH Jun.
* Stopped to emit `:text` event after the root element.
* GH-167
* Patch by NAITOH Jun.
### Fixes
* Fixed a bug that SAX2 parser doesn't expand predefined entities for
`characters` callback.
* GH-168
* Patch by NAITOH Jun.
### Thanks
* NAITOH Jun
* Watson
## 3.3.1 - 2024-06-25 {#version-3-3-1}
### Improvements
* Added support for detecting malformed top-level comments.
* GH-145
* Patch by Hiroya Fujinami.
* Improved `REXML::Element#attribute` performance.
* GH-146
* Patch by Hiroya Fujinami.
* Added support for detecting malformed `<!-->` comments.
* GH-147
* Patch by Hiroya Fujinami.
* Added support for detecting unclosed `DOCTYPE`.
* GH-152
* Patch by Hiroya Fujinami.
* Added `changlog_uri` metadata to gemspec.
* GH-156
* Patch by fynsta.
* Improved parse performance.
* GH-157
* GH-158
* Patch by NAITOH Jun.
### Fixes
* Fixed a bug that large XML can't be parsed.
* GH-154
* Patch by NAITOH Jun.
* Fixed a bug that private constants are visible.
* GH-155
* Patch by NAITOH Jun.
### Thanks
* Hiroya Fujinami
* NAITOH Jun
* fynsta
## 3.3.0 - 2024-06-11 {#version-3-3-0}
### Improvements
* Added support for strscan 0.7.0 installed with Ruby 2.6.
* GH-142
* Reported by Fernando Trigoso.
### Thanks
* Fernando Trigoso
## 3.2.9 - 2024-06-09 {#version-3-2-9}
### Improvements
* Added support for old strscan.
* GH-132
* Reported by Adam.
* Improved attribute value parse performance.
* GH-135
* Patch by NAITOH Jun.
* Improved `REXML::Node#each_recursive` performance.
* GH-134
* GH-139
* Patch by Hiroya Fujinami.
* Improved text parse performance.
* Reported by mprogrammer.
### Thanks
* Adam
* NAITOH Jun
* Hiroya Fujinami
* mprogrammer
## 3.2.8 - 2024-05-16 {#version-3-2-8}
### Fixes
* Suppressed a warning
## 3.2.7 - 2024-05-16 {#version-3-2-7}
### Improvements
* Improve parse performance by using `StringScanner`.
* GH-106
* GH-107
* GH-108
* GH-109
* GH-112
* GH-113
* GH-114
* GH-115
* GH-116
* GH-117
* GH-118
* GH-119
* GH-121
* Patch by NAITOH Jun.
* Improved parse performance when an attribute has many `<`s.
* GH-126
### Fixes
* XPath: Fixed a bug of `normalize_space(array)`.
* GH-110
* GH-111
* Patch by flatisland.
* XPath: Fixed a bug that wrong position is used with nested path.
* GH-110
* GH-122
* Reported by jcavalieri.
* Patch by NAITOH Jun.
* Fixed a bug that an exception message can't be generated for
invalid encoding XML.
* GH-29
* GH-123
* Reported by DuKewu.
* Patch by NAITOH Jun.
### Thanks
* NAITOH Jun
* flatisland
* jcavalieri
* DuKewu
## 3.2.6 - 2023-07-27 {#version-3-2-6}
### Improvements
* Required Ruby 2.5 or later explicitly.
[GH-69][gh-69]
[Patch by Ivo Anjo]
* Added documentation for maintenance cycle.
[GH-71][gh-71]
[Patch by Ivo Anjo]
* Added tutorial.
[GH-77][gh-77]
[GH-78][gh-78]
[Patch by Burdette Lamar]
* Improved performance and memory usage.
[GH-94][gh-94]
[Patch by fatkodima]
* `REXML::Parsers::XPathParser#abbreviate`: Added support for
function arguments.
[GH-95][gh-95]
[Reported by pulver]
* `REXML::Parsers::XPathParser#abbreviate`: Added support for string
literal that contains double-quote.
[GH-96][gh-96]
[Patch by pulver]
* `REXML::Parsers::XPathParser#abbreviate`: Added missing `/` to
`:descendant_or_self/:self/:parent`.
[GH-97][gh-97]
[Reported by pulver]
* `REXML::Parsers::XPathParser#abbreviate`: Added support for more patterns.
[GH-97][gh-97]
[Reported by pulver]
### Fixes
* Fixed a typo in NEWS.
[GH-72][gh-72]
[Patch by Spencer Goodman]
* Fixed a typo in NEWS.
[GH-75][gh-75]
[Patch by Andrew Bromwich]
* Fixed documents.
[GH-87][gh-87]
[Patch by Alexander Ilyin]
* Fixed a bug that `Attriute` convert `'` and `'` even when
`attribute_quote: :quote` is used.
[GH-92][gh-92]
[Reported by Edouard Brière]
* Fixed links in tutorial.
[GH-99][gh-99]
[Patch by gemmaro]
### Thanks
* Ivo Anjo
* Spencer Goodman
* Andrew Bromwich
* Burdette Lamar
* Alexander Ilyin
* Edouard Brière
* fatkodima
* pulver
* gemmaro
[gh-69]:https://github.com/ruby/rexml/issues/69
[gh-71]:https://github.com/ruby/rexml/issues/71
[gh-72]:https://github.com/ruby/rexml/issues/72
[gh-75]:https://github.com/ruby/rexml/issues/75
[gh-77]:https://github.com/ruby/rexml/issues/77
[gh-87]:https://github.com/ruby/rexml/issues/87
[gh-92]:https://github.com/ruby/rexml/issues/92
[gh-94]:https://github.com/ruby/rexml/issues/94
[gh-95]:https://github.com/ruby/rexml/issues/95
[gh-96]:https://github.com/ruby/rexml/issues/96
[gh-97]:https://github.com/ruby/rexml/issues/97
[gh-98]:https://github.com/ruby/rexml/issues/98
[gh-99]:https://github.com/ruby/rexml/issues/99
## 3.2.5 - 2021-04-05 {#version-3-2-5}
### Improvements
* Add more validations to XPath parser.
* `require "rexml/document"` by default.
[GitHub#36][Patch by Koichi ITO]
* Don't add `#dclone` method to core classes globally.
[GitHub#37][Patch by Akira Matsuda]
* Add more documentations.
[Patch by Burdette Lamar]
* Added `REXML::Elements#parent`.
[GitHub#52][Patch by Burdette Lamar]
### Fixes
* Fixed a bug that `REXML::DocType#clone` doesn't copy external ID
information.
* Fixed round-trip vulnerability bugs.
See also: https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/
[HackerOne#1104077][CVE-2021-28965][Reported by Juho Nurminen]
### Thanks
* Koichi ITO
* Akira Matsuda
* Burdette Lamar
* Juho Nurminen
## 3.2.4 - 2020-01-31 {#version-3-2-4}
### Improvements
* Don't use `taint` with Ruby 2.7 or later.
[GitHub#21][Patch by Jeremy Evans]
### Fixes
* Fixed a `elsif` typo.
[GitHub#22][Patch by Nobuyoshi Nakada]
### Thanks
* Jeremy Evans
* Nobuyoshi Nakada
## 3.2.3 - 2019-10-12 {#version-3-2-3}
### Fixes
* Fixed a bug that `REXML::XMLDecl#close` doesn't copy `@writethis`.
[GitHub#20][Patch by hirura]
### Thanks
* hirura
## 3.2.2 - 2019-06-03 {#version-3-2-2}
### Fixes
* xpath: Fixed a bug for equality and relational expressions.
[GitHub#17][Reported by Mirko Budszuhn]
* xpath: Fixed `boolean()` implementation.
* xpath: Fixed `local_name()` with nonexistent node.
* xpath: Fixed `number()` implementation with node set.
[GitHub#18][Reported by Mirko Budszuhn]
### Thanks
* Mirko Budszuhn
## 3.2.1 - 2019-05-04 {#version-3-2-1}
### Improvements
* Improved error message.
[GitHub#12][Patch by FUJI Goro]
* Improved error message.
[GitHub#16][Patch by ujihisa]
* Improved documentation markup.
[GitHub#14][Patch by Alyssa Ross]
### Fixes
* Fixed a bug that `nil` variable value raises an unexpected exception.
[GitHub#13][Patch by Alyssa Ross]
### Thanks
* FUJI Goro
* Alyssa Ross
* ujihisa
## 3.2.0 - 2019-01-01 {#version-3-2-0}
### Fixes
* Fixed a bug that no namespace attribute isn't matched with prefix.
[ruby-list:50731][Reported by Yasuhiro KIMURA]
* Fixed a bug that the default namespace is applied to attribute names.
NOTE: It's a backward incompatible change. If your program has any
problem with this change, please report it. We may revert this fix.
* `REXML::Attribute#prefix` returns `""` for no namespace attribute.
* `REXML::Attribute#namespace` returns `""` for no namespace attribute.
### Thanks
* Yasuhiro KIMURA
## 3.1.9 - 2018-12-20 {#version-3-1-9}
### Improvements
* Improved backward compatibility.
Restored `REXML::Parsers::BaseParser::UNQME_STR` because it's used
by kramdown.
## 3.1.8 - 2018-12-20 {#version-3-1-8}
### Improvements
* Added support for customizing quote character in prologue.
[GitHub#8][Bug #9367][Reported by Takashi Oguma]
* You can use `"` as quote character by specifying `:quote` to
`REXML::Document#context[:prologue_quote]`.
* You can use `'` as quote character by specifying `:apostrophe`
to `REXML::Document#context[:prologue_quote]`.
* Added processing instruction target check. The target must not nil.
[GitHub#7][Reported by Ariel Zelivansky]
* Added name check for element and attribute.
[GitHub#7][Reported by Ariel Zelivansky]
* Stopped to use `Exception`.
[GitHub#9][Patch by Jean Boussier]
### Fixes
* Fixed a bug that `REXML::Text#clone` escapes value twice.
[ruby-dev:50626][Bug #15058][Reported by Ryosuke Nanba]
### Thanks
* Takashi Oguma
* Ariel Zelivansky
* Jean Boussier
* Ryosuke Nanba