sanitize

Sanitize has no breaking API changes in this release, but the major version number has been incremented because we've dropped support for end-of-life versions of Ruby. As long as you're using Ruby 3.1.0 or later, this should be a painless upgrade!

Added

• Added over 100 new CSS properties to the relaxed config, representing all properties that are listed with a status of "Working Draft"...

Bug Fixes

• The CSS URL protocol allowlist is now enforced on the nonstandard -webkit-image-set CSS function. @ltk - #242

Bug Fixes

• The CSS URL protocol allowlist is now properly enforced in CSS Images Module Level 4 image and image-set functions. @ltk - #240

Bug Fixes

• Proactively fixed a compatibility issue with libxml >= 2.13.0 (which will be used in an upcoming version of Nokogiri) that caused HTML doctype sanitization to fail. @flavorjones - #238

Features

• Added the text-decoration-skip-ink and text-decoration-thickness CSS properties to the relaxed config. @martineriksson - #228