Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Masterminds/html5-php
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 2.11.0
Choose a base ref
...
head repository: Masterminds/html5-php
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 2.12.0
Choose a head ref
  • 14 commits
  • 13 files changed
  • 5 contributors

Commits on Sep 4, 2026

  1. Require ext-mbstring, which the parser already needs 

    CharacterReference::lookupDecimal() calls mb_decode_numericentity() with no
guard, so a system without mbstring gets a fatal on an undefined function
instead of being turned away by Composer.

Declaring the extension makes the fallbacks in UTF8Utils unreachable, so
countChars() keeps only mb_strlen() and convertToUTF8() only the branch it
already preferred. The iconv path was reached only without mbstring, and
never for the 'auto' encoding, where it threw instead.
    @Amoifr
    Amoifr committed Sep 4, 2026
    Configuration menu
    Copy the full SHA
    6145d93 View commit details
    Browse the repository at this point in the history

Commits on Sep 14, 2026

  1. Serialize entity reference nodes instead of skipping them

    @Amoifr
    Amoifr committed Sep 14, 2026
    Configuration menu
    Copy the full SHA
    86fe29a View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2026

  1. fix: bound the autoclose walk so deeply nested block elements are not… 

    … quadratic
    @graith
    graith committed Sep 27, 2026
    Configuration menu
    Copy the full SHA
    5651e7f View commit details
    Browse the repository at this point in the history

Commits on Oct 20, 2026

  1. Preserve form feeds in quoted attribute values

    @ac1982
    ac1982 committed Oct 20, 2026
    Configuration menu
    Copy the full SHA
    863c6f9 View commit details
    Browse the repository at this point in the history

Commits on Oct 22, 2026

  1. Merge pull request #278 from Amoifr/fix-203-require-ext-mbstring 

    Require ext-mbstring, which the parser already needs
    @goetas
    goetas authored Oct 22, 2026
    Configuration menu
    Copy the full SHA
    d46e369 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #282 from ac1982/fix/quoted-attribute-form-feed 

    Preserve form feeds in quoted attribute values
    @goetas
    goetas authored Oct 22, 2026
    Configuration menu
    Copy the full SHA
    849f2a0 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #281 from BrianWillows/bound-autoclose-walk 

    Bound the autoclose walk: deeply nested block elements are quadratic
    @goetas
    goetas authored Oct 22, 2026
    Configuration menu
    Copy the full SHA
    ca3d2de View commit details
    Browse the repository at this point in the history

  4. Merge pull request #279 from Amoifr/fix-244-entity-reference-nodes 

    Serialize entity reference nodes instead of skipping them
    @goetas
    goetas authored Oct 22, 2026
    Configuration menu
    Copy the full SHA
    22af5e5 View commit details
    Browse the repository at this point in the history

Commits on Oct 24, 2026

  1. Add security policy 

    Document how to privately report vulnerabilities (refs #283).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
    @goetas @claude
    goetas and claude committed Oct 24, 2026
    Configuration menu
    Copy the full SHA
    ea5cb52 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #284 from Masterminds/add-security-policy 

    Add SECURITY.md security policy
    @goetas
    goetas authored Oct 24, 2026
    Configuration menu
    Copy the full SHA
    de57407 View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2026

  1. Harden scanner position tracking, namespace serialization and encodin… 

    …g handling

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
    @goetas @claude
    goetas and claude committed Oct 25, 2026
    Configuration menu
    Copy the full SHA
    c992521 View commit details
    Browse the repository at this point in the history

  2. Keep libxml errors out of user error handlers when building namespace… 

    …d elements

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
    @goetas @claude
    goetas and claude committed Oct 25, 2026
    Configuration menu
    Copy the full SHA
    fe3a0d2 View commit details
    Browse the repository at this point in the history

  3. Remove extra blank line in UTF8Utils to satisfy php-cs-fixer 

    Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
    @goetas @claude
    goetas and claude committed Oct 25, 2026
    Configuration menu
    Copy the full SHA
    bc242f8 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #285 from Masterminds/fix/cs-utf8utils-blank-line 

    Fix php-cs-fixer failure in UTF8Utils
    @goetas
    goetas authored Oct 25, 2026
    Configuration menu
    Copy the full SHA
    15e1666 View commit details
    Browse the repository at this point in the history
Loading