4.0.0

• Update html5ever to 0.27
• feature: change lifetimes on UrlRelative (breaking change)
• chore: use the Display trait (and ToString) instead of an inherent to_string method (breaking change)
• Security fixes are not backported to the 2.0 branch any more. Only the v3 and v4 branches are supported.

3.3.0

• chore: bump MSRV to 1.60.0
• docs: fix incorrect XSS example
• feature: add UrlRelative::RewriteWithRoot

3.2.1

• chore: bump MSRV to 1.51.0 serde-rs/serde#2255
• chore: fix broken links in documentation

3.2.0

• chore: bump MSRV to 1.49.0
• chore: update to html5ever 0.26
• chore: switch from lazy_static to once_cell
• feature: add Builder::empty() constructor

3.1.4

• chore: use #[non_exhaustive] instead of hidden variant for UrlRelative policy
• chore: remove unnecessary dependency on third-party matches! macro

3.1.3

• fix: incorrect FF/CR handling in clean_text
• fix: split class name attribute by all ASCII whitespace, not just SP 0x20
• docs: fix incorrect English in is_html documentation

2.1.4

• fix: split class name attribute by all ASCII whitespace, not just SP 0x20 (backported from 3.1.3)

3.1.2

• fix: unexpected namespace switches can allow XSS via svg/mathml parsing

3.1.1

• fix: Crash on invalid URLs in some configurations (issue #136)

3.1.0

• feature: Whitelist generic attribute prefix
• chore: Update html5ever to 0.25
• feature: support adding attribute values to elements