12 KiB
12 KiB
Changelog
v3.3.3 (2023-10-09)
- Enhancements
- Allow string fields on
input_changed?
- Allow string fields on
v3.3.2 (2023-08-10)
-
Enhancements
- Address deprecations in Elixir v1.16+
-
Deprecations
- Deprecate
inputs_for/2
andinputs_for/3
(without anonymous functions)
- Deprecate
v3.3.1 (2023-02-27)
- Bug fix
- Set display to none on generated forms
- Warn for maps with atom keys
v3.3.0 (2023-02-10)
-
Enhancements
- Support deeply nested class lists
- Implement Phoenix.HTML.Safe for URI
- Implement Phoenix.HTML.FormData for Map
-
Bug fix
- Generate unique IDs for checkboxes based on the value
- Use artificial button click instead of
form.submit
in JavaScript to trigger all relevant events - Fix a bug where nil/false/true attributes in
aria
/data
/phx
would emit empty or literal values, such as"true"
and"false"
. This release aligns them with all other attributes so bothnil
andfalse
emit nothing.true
emits the attribute with no value.
-
Deprecations
Phoenix.HTML.Tag.attributes_escape/1
is deprecated in favor ofPhoenix.HTML.attributes_escape/1
v3.2.0 (2021-12-18)
- Enhancements
- Raise if the
id
attribute is set to a number. This is actually an invalid value according to the HTML spec and it can lead to problematic client behaviour, especially in LiveView and other client frameworks. - Allow
phx
attributes to be nested, similar toaria
anddata
attributes - Allow hidden fields in forms to be a list of values
- Raise if the
v3.1.0 (2021-10-23)
- Bug fix
- Do not submit data-method links if default has been prevented
- Deprecations
- Deprecate
~E
andPhoenix.HTML.Tag.attributes_escape/1
- Remove deprecated
Phoenix.HTML.Link.link/1
- Deprecate
v3.0.4 (2021-09-23)
- Bug fix
- Ensure
class={@class}
in HEEx templates and:class
attribute incontent_tag
are properly escaped against XSS
- Ensure
v3.0.3 (2021-09-04)
- Bug fix
- Fix sorting of attributes in
tag
/content_tag
- Fix sorting of attributes in
v3.0.2 (2021-08-19)
- Enhancements
- Support maps on
Phoenix.HTML.Tag.attributes_escape/1
- Support maps on
v3.0.1 (2021-08-14)
- Enhancements
- Add
Phoenix.HTML.Tag.csrf_input_tag/2
- Add
v3.0.0 (2021-08-06)
-
Enhancements
- Allow extra html attributes on the
:prompt
option inselect
- Make
Plug
an optional dependency - Prefix form id on inputs when it is given to
form_for/3
- Allow
%URI{}
to be passed tolink/2
andbutton/2
as:to
- Expose
Phoenix.HTML.Tag.csrf_token_value/1
- Add
Phoenix.HTML.Tag.attributes_escape/1
- Allow extra html attributes on the
-
Bug fixes
- Honor the
form
attribute when creating hidden checkbox input - Use
to_iso8601
as the standard implementation for safe dates and times
- Honor the
-
Deprecations
form_for
without an anonymous function has been deprecated. v3.0 has deprecated the usage, v3.1 will emit warnings, and v3.2 will fully remove the functionality
-
Backwards incompatible changes
- Strings given as attributes keys in
tag
andcontent_tag
are now emitted as is (without being dasherized) and are also HTML escaped - Prefix form id on inputs when it is given to
form_for/3
- By default dates and times will format to the
to_iso8601
functions provided by their implementation - Do not include
csrf-param
andmethod-param
in generatedcsrf_meta_tag
- Remove deprecated
escape_javascript
in favor ofjavascript_escape
- Remove deprecated
field_value
in favor ofinput_value
- Remove deprecated
field_name
in favor ofinput_name
- Remove deprecated
field_id
in favor ofinput_id
- Strings given as attributes keys in
v2.14.3 (2020-12-12)
- Bug fixes
- Fix warnings on Elixir v1.12
v2.14.2 (2020-04-30)
- Deprecations
- Deprecate
Phoenix
-specific assigns:view_module
and:view_template
- Deprecate
v2.14.1 (2020-03-20)
-
Enhancements
- Add
Phoenix.HTML.Form.options_for_select/2
- Add
Phoenix.HTML.Form.inputs_for/3
- Add
-
Bug fixes
- Disable hidden input for disabled checkboxes
v2.14.0 (2020-01-28)
- Enhancements
- Remove enforce_utf8 workaround on forms as it is no longer required by browser
- Remove support tuple-based date/time with microseconds calendar types
- Allow strings as first element in
content_tag
- Add
:srcset
support toimg_tag
- Allow
inputs_for
to skip hidden fields
v2.13.4 (2020-01-28)
- Bug fixes
- Fix invalid :line in Elixir v1.10.0
v2.13.3 (2019-05-31)
-
Enhancements
- Add atom support to FormData
-
Bug fixes
- Keep proper line numbers on .eex templates for proper coverage
v2.13.2 (2019-03-29)
- Bug fixes
- Stop event propagation when confirm dialog is canceled
v2.13.1 (2019-01-05)
-
Enhancements
- Allow safe content to be given to label
- Also escale template literals in
javascript_escape/1
-
Bug fixes
- Fix deprecation warnings to point to the correct alternative
v2.13.0 (2018-12-09)
-
Enhancements
- Require Elixir v1.5+ for more efficient template compilation/rendering
- Add
Phoenix.HTML.Engine.encode_to_iodata!/1
- Add
Phoenix.HTML.Form.form_for/3
that works without an anonymous function
-
Deprecations
- Deprecate
Phoenix.HTML.escape_javascript/1
in favor ofPhoenix.HTML.javascript_escape/1
for consistency
- Deprecate
v2.12.0 (2018-08-06)
-
Enhancements
- Configurable and extendable data-confirm behaviour
- Allow data-confirm with submit buttons
- Support ISO 8601 formatted strings for date and time values
-
Bug fixes
- Provide a default id of the field name for
@conn
based forms
- Provide a default id of the field name for
v2.11.2 (2018-04-13)
-
Enhancements
- Support custom precision on time input
-
Bug fixes
- Do not raise when
:
is part of a path on link/button attributes
- Do not raise when
v2.11.1 (2018-03-20)
-
Enhancements
- Add
label/1
- Copy the target attribute of the link in the generated JS form
- Add
-
Bug fixes
- Support any value that is html escapable in
radio_button
- Support any value that is html escapable in
v2.11.0 (2018-03-09)
-
Enhancements
- Add date, datetime-local and time input types
- Enable string keys to be usable with forms
- Support carriage return in
text_to_html
- Add support for HTML5 boolean attributes to
content_tag
andtag
- Improve performance by relying on
html_safe_to_iodata/1
- Protect against CSRF tokens leaking across hosts when the POST URL is dynamic
- Require
to
attribute in links and buttons to explicitly pass protocols as a separate option for safety reasons
-
Bug fixes
- Guarantee
input_name/2
always returns strings - Improve handling of uncommon whitespace and null in
escape_javascript
- Escape value attribute so it is never treated as a boolean
- Guarantee
-
Backwards incompatible changes
- The :csrf_token_generator configuration in the Phoenix.HTML app no longer works due to the improved security mechanisms
v2.10.5 (2017-11-08)
- Enhancements
- Do not require the :as option in form_for
v2.10.4 (2017-08-15)
- Bug fixes
- Fix formatting of days in datetime_builder
v2.10.3 (2017-07-30)
-
Enhancements
- Allow specifying a custom CSRF token generator
-
Bug fixes
- Do not submit
method: :get
in buttons as "post"
- Do not submit
v2.10.2 (2017-07-24)
- Bug fixes
- Traverse DOM elements up when handling data-method
v2.10.1 (2017-07-22)
- Bug fixes
- Only generate CSRF token if necessary
v2.10.0 (2017-07-21)
-
Enhancements
- Support custom attributes in options in select
-
Bug fixes
- Accept non-binary values in textarea's content
- Allow nested forms on the javascript side. This means
link
andbutton
no longer generate a child form such as the:form
option has no effect and "data-submit=parent" is no longer supported. Instead "data-to" and "data-method" are set on the entities and the form is generated on the javascript side of things
v2.9.3 (2016-12-24)
- Bug fixes
- Once again support any name for atom forms
v2.9.2 (2016-12-24)
- Bug fixes
- Always read from
form.params
and then from:selected
inselect
andmultiple_select
before falling back toinput_value/2
- Always read from
v2.9.1 (2016-12-20)
- Bug fixes
- Implement proper
input_value/3
callback
- Implement proper
v2.9.0 (2016-12-19)
- Enhancements
- Add
img_tag/2
helper toPhoenix.HTML.Tag
- Submit nearest form even if not direct descendent
- Use more iodata for
tag/2
andcontent_tag/3
- Add
input_value/3
,input_id/2
andinput_name/2
as a unified API around the input (alongsideinput_type/3
andinput_validations/2
)
- Add
v2.8.0 (2016-11-15)
- Enhancements
- Add
csrf_meta_tag/0
helper toPhoenix.HTML.Tag
- Allow passing a
do:
option toPhoenix.HTML.Link.button/2
- Add
v2.7.0 (2016-09-21)
- Enhancements
- Render button tags for form submits and in the
button/2
function - Allow
submit/2
andbutton/2
to receivedo
blocks - Support the
:multiple
option infile_input/3
- Remove previously deprecated and unused
model
field
- Render button tags for form submits and in the
v2.6.1 (2016-07-08)
-
Enhancements
- Remove warnings on v1.4
-
Bug fixes
- Ensure some contents are properly escaped as an integer
- Ensure JavaScript data-submit events bubble up until it finds the proper parent
v2.6.0 (2016-06-16)
-
Enhancements
- Raise helpful error when using invalid iodata
- Inline date/time API with Elixir v1.3 Calendar types
- Add
:insert_brs
option totext_to_html/2
- Run on Erlang 19 without warnings
-
Client-side changes
- Use event delegation in
phoenix_html.js
- Drop IE8 support on
phoenix_html.js
- Use event delegation in
-
Backwards incompatible changes
:min
,:sec
option inPhoenix.HTML.Form
(datetime_select/3
andtime_select/3
) are no longer supported. Use:minute
or:second
instead.
v2.5.1 (2016-03-12)
- Bug fixes
- Ensure multipart files work with inputs_for
v2.5.0 (2016-01-28)
- Enhancements
- Introduce
form.data
field instead ofform.model
. Currently those values are kept in sync then the form is built butform.model
will be deprecated in the long term
- Introduce
v2.4.0 (2016-01-21)
-
Enhancements
- Add
rel=nofollow
auto generation for non-get links - Introduce
:selected
option forselect
andmultiple_select
- Add
-
Bug fixes
- Fix safe engine incorrectly marking safe code as unsafe when last expression is
<% ... %>
- Fix safe engine incorrectly marking safe code as unsafe when last expression is
v2.3.0 (2015-12-16)
- Enhancements
- Add
escape_javascript/1
- Add helpful error message when using unknown
@inner
assign - Add
Phoenix.HTML.Format.text_to_html/2
- Add
v2.2.0 (2015-09-01)
- Bug fix
- Allow the
:name
to be given in forms. For this, using:name
to configure the underlying input name prefix has been deprecated in favor of:as
- Allow the
v2.1.2 (2015-08-22)
- Bug fix
- Do not include values in
password_input/3
- Do not include values in
v2.1.1 (2015-08-15)
- Enhancements
- Allow nil in
raw/1
- Allow block options in
label/3
- Introduce
:skip_deleted
ininputs_for/4
- Allow nil in
v2.1.0 (2015-08-06)
- Enhancements
- Add an index field to forms to be used by
inputs_for/4
collections
- Add an index field to forms to be used by
v2.0.1 (2015-07-31)
- Bug fix
- Include web directory in Hex package
v2.0.0 (2015-07-30)
- Enhancements
-
No longer generate onclick attributes.
The main motivation for this is to provide support for Content Security Policy, which recommends disabling all inline scripts in a page.
We took the opportunity to also add support for data-confirm in
link/2
.
-
v1.4.0 (2015-07-26)
- Enhancements
- Support
input_type/2
andinput_validations/2
as reflection mechanisms
- Support
v1.3.0 (2015-07-23)
- Enhancements
- Add
Phoenix.HTML.Form.inputs_for/4
support - Add multiple select support
- Add reset input
- Infer default text context for labels
- Add
v1.2.1 (2015-06-02)
- Bug fix
- Ensure nil parameters are not discarded when rendering input
v1.2.0 (2015-05-30)
- Enhancements
- Add
label/3
for generating a label tag within a form
- Add
v1.1.0 (2015-05-20)
- Enhancements
- Allow do/end syntax with
link/2
- Raise on missing assigns
- Allow do/end syntax with
v1.0.1
- Bug fixes
- Avoid variable clash in Phoenix.HTML engine buffers
v1.0.0
- Enhancements
- Provides an EEx engine with HTML safe rendering
- Provides a
Phoenix.HTML.Safe
protocol - Provides a
Phoenix.HTML.FormData
protocol - Provides functions for generating tags, links and form builders in a safe way