Merge pull request #29 from vanilla/feature/update-hmtmlawed

Update Htmlawed to version 1.2.15 - VNLA-5166

Author: acharron-hl

.github/workflows/ci.yml

@@ -0,0 +1,33 @@
+name: CI
+
+on:
+    push:
+        branches:
+            - main
+    pull_request:
+
+concurrency:
+    # Concurrency is only limited on pull requests. head_ref is only defined on PR triggers so otherwise it will use the random run id and always build all pushes.
+    group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+    cancel-in-progress: true
+
+permissions:
+    contents: read
+
+jobs:
+    phpunit-tests:
+        strategy:
+            fail-fast: false
+            matrix:
+                php-version: ["7.4", "8.0", "8.1", "8.2"]
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v3
+            - name: Installing PHP ${{ matrix.php-version }}
+              uses: shivammathur/setup-php@v2
+              with:
+                  php-version: ${{ matrix.php-version }}
+            - name: Composer Install
+              run: composer install -o
+            - name: PHPUnit
+              run: ./vendor/bin/phpunit -c ./phpunit.xml.dist

.gitignore

@@ -3,4 +3,5 @@
 composer.lock
 coverage.clover
 tests/fixtures/filtered.html
-tests/fixtures/phantomjs.html
+tests/fixtures/phantomjs.html
+.phpunit.result.cache

composer.json

@@ -9,10 +9,11 @@
         }
     ],
     "require": {
-        "php": ">=5.4.0"
+        "php": ">=7.4.0"
     },
     "require-dev": {
-        "tburry/pquery": "~1.0.1"
+        "tburry/pquery": "~1.0.1",
+        "phpunit/phpunit": "^9.0"
     },
     "autoload": {
         "classmap": [
@@ -21,7 +22,7 @@
     },
     "autoload-dev": {
         "psr-4": {
-            "Htmlawed\\Test\\": "tests"
+            "Htmlawed\\Tests\\": "tests"
         }
     }
 }

src/Htmlawed.php

@@ -15,6 +15,7 @@ class Htmlawed {
         'anti_link_spam' => ['`.`', ''],
         'balance' => 1,
         'cdata' => 3,
+        'safe' => 1,
         'comment' => 1,
         'css_expression' => 0,
         'deny_attribute' => 'on*,style',