Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dep: update loofah and nokogiri to versions fully supporting HTML5 #166

Merged
merged 1 commit into from May 24, 2023

Conversation

flavorjones
Copy link
Member

@flavorjones flavorjones commented May 20, 2023

THIS IS VARIATION 2 - see variation 1 at #164

Require versions of Nokogiri and Loofah that support HTML5:

  • loofah v2.21.x introduced Rails::HTML5::Sanitizer
  • nokogiri v1.14.x is needed for loofah to subclass Nokogiri::HTML5::{Document,DocumentFragment}

Update required_ruby_version to ">= 2.7.0" to match Nokogiri's constraint for v1.14.x.

Update CI to only test supported Ruby versions.

The alternative (#164) is to continue to support older versions of Nokogiri (for Ruby 2.5) and Loofah.

Copy link
Member

@rafaelfranca rafaelfranca left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd go with this version and release another minor version of this library. If we need to support old nokogiri, we can continue evolving the current minor version (1.5).

- loofah v2.21.x introduced Rails::HTML5::Sanitizer
- nokogiri v1.14.x is needed for loofah to subclass Nokogiri::HTML5::{Document,DocumentFragment}

Update required_ruby_version to ">= 2.7.0" to match Nokogiri's
constraint for v1.14.x.

Update CI to only test supported Ruby versions.
@flavorjones flavorjones force-pushed the flavorjones-update-deps-for-html5-variation2 branch from 03ed4e7 to 7cc07bb Compare May 24, 2023 14:27
@flavorjones flavorjones merged commit cd77210 into main May 24, 2023
10 checks passed
@flavorjones flavorjones deleted the flavorjones-update-deps-for-html5-variation2 branch May 24, 2023 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants