diff --git a/actionview/CHANGELOG.md b/actionview/CHANGELOG.md index 49de0371129dcc18f4a0f418e0a990725388ddc1..42e5229715ba66329bdf3fadf60038889dc77548 100644 --- a/actionview/CHANGELOG.md +++ b/actionview/CHANGELOG.md @@ -10,6 +10,29 @@ `assert_select_encoded` `assert_select_email` + Note: + The substitution values syntax in `assert_select` has changed. + + `assert_select "div#?", /\d+/` + `assert_select "div:match('id', ?)", /\d+/` + + The attribute to match should be enclosed in quotes to avoid + issues with Nokogiri's css selector syntax parsing. + It is not necessary to do so with the question mark. + + *Kasper Timm Hansen* + +* Loofah replaces html-scanner in `sanitize_helper` + + `sanitize` can now take a `Loofah::Scrubber` for powerful scrubbing. + [See some examples of scrubbers here](https://github.com/flavorjones/loofah#loofahscrubber) + + `PermitScrubber` has been added. Set the attributes and tags you want to keep and get everything else stripped. + + `TargetScrubber` has been added. Set the attributes and tags you want to have stripped and keep everything else. + + The documentation for `PermitScrubber` and `TargetScrubber` explains how you can gain complete control over when and how elements should be stripped. + *Kasper Timm Hansen* * Bring `cache_digest` rake tasks up-to-date with the latest API changes