www/ruby-rails-html-sanitizer 1.7.1 NetBSD

HTML sanitizer for Rails applications

System: NetBSD
Repository: pkgsrc
Maintainer: [email protected]
Last update: 2026-08-12
Commit: 649de6204b
License: mit
Categories: www, ruby
Package size: 33.4 KiB, 102.8 KiB installed

Description

HTML sanitization for Rails applications.

Version history 1

1.7.1 2026-08-12 649de6204b

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

pkgin install ruby33-rails-html-sanitizer

From pkgsrc:

cd /usr/pkgsrc/www/ruby-rails-html-sanitizer && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	Version
NetBSD 10.1 x86_64	1.7.1
NetBSD 10.1 aarch64	1.7.1
SmartOS / illumos x86_64	1.7.1
macOS 15 arm64	1.7.1

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

graph LR
  me["www/ruby-rails-html-sanitizer"]
  u0["www/ruby-actionview72"] --> me
  u1["www/ruby-actionview80"] --> me
  me --> d0["lang/ruby33"]
  me --> d1["www/ruby-loofah"]
  classDef this fill:#ab2b28,color:#ffffff,stroke:#ab2b28
  class me this

Dependencies

Run dependencies 2

Required by 2

Configuration

No options to configure.

Service scripts: none
Flavors: ruby34-rails-html-sanitizer-1.7.1, ruby40-rails-html-sanitizer-1.7.1

Commit history 1

Date Commit Credits Log message

2026-08-12

649de6204b

taca

www/ruby-rails-html-sanitizer: update to 1.7.1

1.7.1 (2026-07-15) * SVG reference elements now restrict both href and xlink:href to local references. Previously PermitScrubber restricted only xlink:href on elements in SVG_ALLOW_LOCAL_HREF, so a plain href attribute on those elements could reference an external document. Applications are only affected if the allowed tags are overridden to include an SVG reference element such as use; the default configuration is not affected. This change addresses GHSA-cj75-f6xr-r4g7 (CVE requested). The minimum Loofah dependency is now ~> 2.25, >= 2.25.2.