Skip to content

Commit

Permalink
Generate (95871f3)
Browse files Browse the repository at this point in the history
  • Loading branch information
github-actions committed Aug 22, 2024
1 parent d1f85e6 commit 8e23c2f
Show file tree
Hide file tree
Showing 4 changed files with 86 additions and 8 deletions.
88 changes: 81 additions & 7 deletions NEWS_md.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,18 @@ <h3>Table of Contents</h3>
</summary>
<ul class="link-list" role="directory">
<li>
<details open>
<summary> <a href="#label-3.3.6+-+2024-08-22+-7B-23version-3-3-6-7D">3.3.6 - 2024-08-22 {#version-3-3-6}</a>
</summary>
<ul class="link-list" role="directory">
<li> <a href="#label-Improvements">Improvements</a>
<li> <a href="#label-Fixes">Fixes</a>
<li> <a href="#label-Thanks">Thanks</a>

</ul>
</details>
</li>
<li>
<details open>
<summary> <a href="#label-3.3.5+-+2024-08-12+-7B-23version-3-3-5-7D">3.3.5 - 2024-08-12 {#version-3-3-5}</a>
</summary>
Expand Down Expand Up @@ -313,6 +325,68 @@ <h3>Pages</h3>

<h1 id="label-News">News<span><a href="#label-News">&para;</a> <a href="#top">&uarr;</a></span></h1>

<h2 id="label-3.3.6+-+2024-08-22+-7B-23version-3-3-6-7D">3.3.6 - 2024-08-22 {#version-3-3-6}<span><a href="#label-3.3.6+-+2024-08-22+-7B-23version-3-3-6-7D">&para;</a> <a href="#top">&uarr;</a></span></h2>

<h3 id="label-Improvements">Improvements<span><a href="#label-Improvements">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Removed duplicated entity expansions for performance.</p>
<ul><li>
<p>GH-194</p>
</li><li>
<p>Patch by Viktor Ivarsson.</p>
</li><li>
<p>GH-194</p>
</li><li>
<p>Patch by Viktor Ivarsson.</p>
</li></ul>
</li><li>
<p>Improved namespace conflicted attribute check performance. It was too slow for deep elements.</p>
<ul><li>
<p>Reported by l33thaxor.</p>
</li></ul>
</li></ul>

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that default entity expansions are counted for security check. Default entity expansions should not be counted because they don't have a security risk.</p>
<ul><li>
<p>GH-198</p>
</li><li>
<p>GH-199</p>
</li><li>
<p>Patch Viktor Ivarsson</p>
</li><li>
<p>GH-198</p>
</li><li>
<p>GH-199</p>
</li><li>
<p>Patch Viktor Ivarsson</p>
</li></ul>
</li><li>
<p>Fixed a parser bug that parameter entity references in internal subsets are expanded. It's not allowed in the XML specification.</p>
<ul><li>
<p>GH-191</p>
</li><li>
<p>Patch by NAITOH Jun.</p>
</li></ul>
</li><li>
<p>Fixed a stream parser bug that user-defined entity references in text aren't expanded.</p>
<ul><li>
<p>GH-200</p>
</li><li>
<p>Patch by NAITOH Jun.</p>
</li></ul>
</li></ul>

<h3 id="label-Thanks">Thanks<span><a href="#label-Thanks">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Viktor Ivarsson</p>
</li><li>
<p>NAITOH Jun</p>
</li><li>
<p>l33thaxor</p>
</li></ul>

<h2 id="label-3.3.5+-+2024-08-12+-7B-23version-3-3-5-7D">3.3.5 - 2024-08-12 {#version-3-3-5}<span><a href="#label-3.3.5+-+2024-08-12+-7B-23version-3-3-5-7D">&para;</a> <a href="#top">&uarr;</a></span></h2>

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
Expand Down Expand Up @@ -340,7 +414,7 @@ <h2 id="label-3.3.4+-+2024-08-01+-7B-23version-3-3-4-7D">3.3.4 - 2024-08-01 {#ve

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that <code>REXML::Security</code> isn’t defined when <code>REXML::Parsers::StreamParser</code> is used and <code>rexml/parsers/streamparser</code> is only required.</p>
<p>Fixed a bug that <code>REXML::Security</code> isn't defined when <code>REXML::Parsers::StreamParser</code> is used and <code>rexml/parsers/streamparser</code> is only required.</p>
<ul><li>
<p>GH-189</p>
</li><li>
Expand Down Expand Up @@ -473,7 +547,7 @@ <h3 id="label-Improvements">Improvements<span><a href="#label-Improvements">&par

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that SAX2 parser doesn’t expand predefined entities for <code>characters</code> callback.</p>
<p>Fixed a bug that SAX2 parser doesn't expand predefined entities for <code>characters</code> callback.</p>
<ul><li>
<p>GH-168</p>
</li><li>
Expand Down Expand Up @@ -543,7 +617,7 @@ <h3 id="label-Improvements">Improvements<span><a href="#label-Improvements">&par

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that large XML can’t be parsed.</p>
<p>Fixed a bug that large XML can't be parsed.</p>
<ul><li>
<p>GH-154</p>
</li><li>
Expand Down Expand Up @@ -706,7 +780,7 @@ <h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top"
<p>Patch by NAITOH Jun.</p>
</li></ul>
</li><li>
<p>Fixed a bug that an exception message can’t be generated for invalid encoding XML.</p>
<p>Fixed a bug that an exception message can't be generated for invalid encoding XML.</p>
<ul><li>
<p>GH-29</p>
</li><li>
Expand Down Expand Up @@ -801,7 +875,7 @@ <h3 id="label-Improvements">Improvements<span><a href="#label-Improvements">&par

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that <code>REXML::DocType#clone</code> doesn’t copy external ID information.</p>
<p>Fixed a bug that <code>REXML::DocType#clone</code> doesn't copy external ID information.</p>
</li><li>
<p>Fixed round-trip vulnerability bugs. See also: <a href="https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965">www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965</a>/ [<a href="CVE-2021-28965">HackerOne#1104077]</a>[Reported by Juho Nurminen]</p>
</li></ul>
Expand Down Expand Up @@ -840,7 +914,7 @@ <h2 id="label-3.2.3+-+2019-10-12+-7B-23version-3-2-3-7D">3.2.3 - 2019-10-12 {#ve

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that <code>REXML::XMLDecl#close</code> doesn’t copy <code>@writethis</code>. [GitHub#20][Patch by hirura]</p>
<p>Fixed a bug that <code>REXML::XMLDecl#close</code> doesn't copy <code>@writethis</code>. [GitHub#20][Patch by hirura]</p>
</li></ul>

<h3 id="label-Thanks">Thanks<span><a href="#label-Thanks">&para;</a> <a href="#top">&uarr;</a></span></h3>
Expand Down Expand Up @@ -895,7 +969,7 @@ <h2 id="label-3.2.0+-+2019-01-01+-7B-23version-3-2-0-7D">3.2.0 - 2019-01-01 {#ve

<h3 id="label-Fixes">Fixes<span><a href="#label-Fixes">&para;</a> <a href="#top">&uarr;</a></span></h3>
<ul><li>
<p>Fixed a bug that no namespace attribute isn’t matched with prefix.</p>
<p>Fixed a bug that no namespace attribute isn't matched with prefix.</p>

<p>[ruby-list:50731][Reported by Yasuhiro KIMURA]</p>
</li><li>
Expand Down
2 changes: 1 addition & 1 deletion js/search_index.js
View file

Large diffs are not rendered by default.

Binary file modified js/search_index.js.gz
View file
Binary file not shown.
4 changes: 4 additions & 0 deletions table_of_contents.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,10 @@ <h2 id="pages">Pages</h2>

<ul>
<li><a href="NEWS_md.html#label-News">News</a>
<li><a href="NEWS_md.html#label-3.3.6+-+2024-08-22+-7B-23version-3-3-6-7D">3.3.6 - 2024-08-22 {#version-3-3-6}</a>
<li><a href="NEWS_md.html#label-Improvements">Improvements</a>
<li><a href="NEWS_md.html#label-Fixes">Fixes</a>
<li><a href="NEWS_md.html#label-Thanks">Thanks</a>
<li><a href="NEWS_md.html#label-3.3.5+-+2024-08-12+-7B-23version-3-3-5-7D">3.3.5 - 2024-08-12 {#version-3-3-5}</a>
<li><a href="NEWS_md.html#label-Fixes">Fixes</a>
<li><a href="NEWS_md.html#label-Thanks">Thanks</a>
Expand Down

0 comments on commit 8e23c2f

Please sign in to comment.