• This is a security update, which fixes stored XSS vulnerability in cite tag's cite attribute handling.
• Fixed: Escape any HTML special characters used in cite tag's cite attribute.

• Fix PHP 8.5 compatibility issues with note list rendering.

• This is a security update, which fixes stored XSS vulnerability in image link handing.
• Fixed: In restricted mode, restrict image link protocol. Previously and an image link's href allowed all protocols in restricted mode. Now it goes through the same validation as text links.

• Fix PHP 8.4 compatibility issues (closes #227).

• Links are now rendered when block tags are disabled (closes #225).

• Support : and ! characters in CSS class names (closes #224).
• Support including textile escape sequences inside link title attribute (closes #223).

• HTML void tags render a self-closing slash based on the given document type. If Parser::setDocumentType() is given Parser::DOCTYPE_XHTML, self-closing tags are used, otherwise not.

• Added Parser::setAlignClasses() and Parser::isAlignClassesEnabled(). This can be used to enable img alignment classes in XHTML output document mode, instead of the default align attribute.
• Added Parser::DOCTYPE_HTML5 and Parser::DOCTYPE_XHTML constants. These can be used with Parser::setDocumentType() to specify the output document type.

• Fix deprecation errors that appear on PHP >= 8.1 about preg_split limit argument's NULL value.

Changes:

• Fix: support consecutive links without whitespace between using bracket syntax (closes #202, #205 and #206).

Install using Composer:

$ composer require netcarver/textile:3.7.6

PHP-Textile v3.7.6 requires PHP 5.3.0 or newer.