Skip to content

Upgrade HTMLPurifier (to v4.19.0?)

The (currently) latest version of FlexForm ships with HTMLPurifier v4.13.0 (2020), which is beginning to show its age. Because that version uses dynamic properties and PHP 8.2 is throwing warnings whenever they get used, it is probably time to upgrade the library. There are at least two classes in the older version of HTMLPurifier that depend on dynamic properties, i.e. Lexer and NameSync.

The question remains which version we need to upgrade to :

I don't know if upgrading directly to v4.19.0 is too steep a curve so I'll conveniently leave that up to you, @charlot