Update to KaTeX v0.9.0

editions/prerelease/tiddlers/Release 5.1.16.tid

@@ -11,7 +11,7 @@ type: text/vnd.tiddlywiki
 
 * New [[Dynaview Plugin]] makes it possible to build user interfaces that dynamically respond to changes in scrolling or zooming
 * Improved [[Text-Slicer Plugin|Text-Slicer Edition]] with customisable JSON rules
-* Updated [[KaTeX Plugin]] to latest v0.9.0-beta
+* Updated [[KaTeX Plugin]] to latest v0.9.0
 
 !! Translation Improvements
 

plugins/tiddlywiki/katex/files/README.md

@@ -1,5 +1,6 @@
-# [<img src="https://khan.github.io/KaTeX/katex-logo.svg" width="130" alt="KaTeX">](https://khan.github.io/KaTeX/) [![Build Status](https://travis-ci.org/Khan/KaTeX.svg?branch=master)](https://travis-ci.org/Khan/KaTeX)
-
+# [<img src="https://khan.github.io/KaTeX/katex-logo.svg" width="130" alt="KaTeX">](https://khan.github.io/KaTeX/)
+[![Build Status](https://travis-ci.org/Khan/KaTeX.svg?branch=master)](https://travis-ci.org/Khan/KaTeX)
+[![codecov](https://codecov.io/gh/Khan/KaTeX/branch/master/graph/badge.svg)](https://codecov.io/gh/Khan/KaTeX)
 [![Join the chat at https://gitter.im/Khan/KaTeX](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/Khan/KaTeX?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
 
 KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web.
@@ -16,8 +17,8 @@ KaTeX supports all major browsers, including Chrome, Safari, Firefox, Opera, Edg
 You can [download KaTeX](https://github.com/khan/katex/releases) and host it on your server or include the `katex.min.js` and `katex.min.css` files on your page directly from a CDN:
 
 ```html
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta/katex.min.css" integrity="sha384-L/SNYu0HM7XECWBeshTGLluQO9uVI1tvkCtunuoUbCHHoTH76cDyXty69Bb9I0qZ" crossorigin="anonymous">
-<script src="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta/katex.min.js" integrity="sha384-ad+n9lzhJjYgO67lARKETJH6WuQVDDlRfj81AJJSswMyMkXTD49wBj5EP004WOY6" crossorigin="anonymous"></script>
+<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta1/katex.min.css" integrity="sha384-VEnyslhHLHiYPca9KFkBB3CMeslnM9CzwjxsEbZTeA21JBm7tdLwKoZmCt3cZTYD" crossorigin="anonymous">
+<script src="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta1/katex.min.js" integrity="sha384-O4hpKqcplNCe+jLuBVEXC10Rn1QEqAmX98lKAIFBEDxZI0a+6Z2w2n8AEtQbR4CD" crossorigin="anonymous"></script>
 ```
 
 #### In-browser rendering
@@ -41,6 +42,26 @@ var html = katex.renderToString("c = \\pm\\sqrt{a^2 + b^2}");
 
 Make sure to include the CSS and font files, but there is no need to include the JavaScript. Like `render`, `renderToString` throws if it can't parse the expression.
 
+#### Security
+
+Any HTML generated by KaTeX *should* be safe from `<script>` or other code
+injection attacks.
+(See `maxSize` below for preventing large width/height visual affronts.)
+Of course, it is always a good idea to sanitize the HTML, though you will need
+a rather generous whitelist (including some of SVG and MathML) to support 
+all of KaTeX.
+
+#### Handling errors
+
+If KaTeX encounters an error (invalid or unsupported LaTeX), then it will
+throw an exception of type `katex.ParseError`.  The message in this error
+includes some of the LaTeX source code, so needs to be escaped if you want
+to render it to HTML.  In particular, you should convert `&`, `<`, `>`
+characters to `&amp;`, `&lt;`, `&gt;` (e.g., using `_.escape`)
+before including either LaTeX source code or exception messages in your
+HTML/DOM.  (Failure to escape in this way makes a `<script>` injection
+attack possible if your LaTeX source is untrusted.)
+
 #### Rendering options
 
 You can provide an object of options as the last argument to `katex.render` and `katex.renderToString`. Available options are:
@@ -106,6 +127,9 @@ will appear larger than 1cm in browser units.
 ### Angular2+
 - [ng-katex](https://github.com/garciparedes/ng-katex) Angular module to write beautiful math expressions with TeX syntax boosted by KaTeX library
 
+### Ruby
+
+- [katex-ruby](https://github.com/glebm/katex-ruby) Provides server-side rendering and integration with popular Ruby web frameworks (Rails, Hanami, and anything that uses Sprockets).
 
 ## Contributing
 

plugins/tiddlywiki/katex/styles.tid

@@ -57,6 +57,13 @@ tags: [[$:/tags/Stylesheet]]
 	font-style: normal;
 }
 
+@font-face {
+	font-family: KaTeX_Main;
+	src: url(<<datauri '$:/plugins/tiddlywiki/katex/fonts/KaTeX_Main-BoldItalic.woff'>>) format('woff');
+	font-weight: 700;
+	font-style: italic;
+}
+
 @font-face {
 	font-family: KaTeX_Main;
 	src: url(<<datauri '$:/plugins/tiddlywiki/katex/fonts/KaTeX_Main-Italic.woff'>>) format('woff');
@@ -78,6 +85,20 @@ tags: [[$:/tags/Stylesheet]]
 	font-style: italic;
 }
 
+@font-face {
+	font-family: KaTeX_SansSerif;
+	src: url(<<datauri '$:/plugins/tiddlywiki/katex/fonts/KaTeX_SansSerif-Bold.woff'>>) format('woff');
+	font-weight: 700;
+	font-style: normal;
+}
+
+@font-face {
+	font-family: KaTeX_SansSerif;
+	src: url(<<datauri '$:/plugins/tiddlywiki/katex/fonts/KaTeX_SansSerif-Italic.woff'>>) format('woff');
+	font-weight: 400;
+	font-style: italic;
+}
+
 @font-face {
 	font-family: KaTeX_SansSerif;
 	src: url(<<datauri '$:/plugins/tiddlywiki/katex/fonts/KaTeX_SansSerif-Regular.woff'>>) format('woff');
@@ -126,3 +147,4 @@ tags: [[$:/tags/Stylesheet]]
 	font-weight: 400;
 	font-style: normal;
 }
+