Fix
— If a Tool specifies some tags to substitute on paste, all attributes of that tags will be removed before passing them to the tool. Possible XSS vulnerability fixed.Fix
— Workaround for the HTMLJanitor bug with Tables (guardian/html-janitor#3) addedImprovement
— Tools API —pasteConfig().tags
now support sanitizing configuration. It allows you to leave some explicitly specified attributes for pasted content.