All notable changes to this project will be documented in this file.
This project adheres to Semantic Versioning.
- Bump version to 1.0 as this gem is production-ready for 10 years
- Declare the gem to be unmaintained
- Add compatibility with Rails 7.1
- Add compatibility with HAML 6
- NOTE: Don't use HAML 6.0.0. AngularXSS relies on a patch introduced in 6.0.1. Anything newer should be fine - the gem is currently tested against HAML 6.3
- Refactor our patches to use
Module#prepend
instead ofModule#module_eval
- Refactor gem version comparisons to use
Gem::Version
instances - Refactor specs to use the
expect
syntax - Improve test coverage for more interpolation scenarios in ERB and HAML
- Add unit tests for patched methods
- Add compatibility with Rails 7
- Require MFA for RubyGems
- Add compatibility with Rails 6
- Add compatibility with Haml > 5.2
- Add compatibility with Ruby 2.7 and Ruby 3
- Add compatibility with Rails 5
- Add compatibility with Haml 5
- Changed the way Angular XSS escapes double braces from
{ {
to{{ $root.DOUBLE_LEFT_CURLY_BRACE }}
. This requires a change in the application code. Check the README for details.
- Fix a bug where an unexpected nil value would cause problems
- Support Rails 4.2
- Fix escaping of precompiled attributes in Haml templates
- Add option to disable escaping temporarily via
AngularXss.disable do ... end
- Require Haml >= 3.1.5 (lower Hamls don't escape element attribute values)
- First version.