prepare files for 0.1.9 release

Author: brianmario

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Changelog
 
+## 0.1.9 (October 15th, 2010)
+* add a flag as an optional 2nd parameter to EscapeUtils.escape_html to disable/enable the escaping of the '/' character. Defaults to the new flag EscapeUtils.html_secure
+
 ## 0.1.8 (September 29th, 2010)
 * fix URI escaping one last time ;)
 

escape_utils.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{escape_utils}
-  s.version = "0.1.8"
+  s.version = "0.1.9"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Brian Lopez"]
-  s.date = %q{2010-09-29}
+  s.date = %q{2010-10-15}
   s.email = %q{seniorlopez@gmail.com}
   s.extensions = ["ext/extconf.rb"]
   s.extra_rdoc_files = [

lib/escape_utils.rb

@@ -4,6 +4,8 @@
 
 EscapeUtils.send(:extend, EscapeUtils)
 module EscapeUtils
+  VERSION = "0.1.9"
+
   # turn on/off the escaping of the '/' character during HTML escaping
   # Escaping '/' is recommended by the OWASP - http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content
   # This is because quotes around HTML attributes are optional in most/all modern browsers at the time of writing (10/15/2010)
@@ -16,7 +18,5 @@ def self.html_secure=(val)
     @@html_secure = val
   end
 
-  VERSION = "0.1.8"
-
   autoload :HtmlSafety, 'escape_utils/html_safety'
 end