Update all referenced specs

A systematic update of all referenced specifications to the latest
published version.

Change-Id: I38eafd7ee0de8c6a8ad7dfa8e5b1e021c060e2d2

Author: tstarling

HISTORY.md

@@ -1,20 +1,44 @@
 # Release History
 
 ## css-sanitizer x.x.x (not yet released)
+
+New modules:
 * Add support for CSS Box Sizing Level 4 (as seen in draft from 2025-02-24)
   - values: stretch, fit-content, and contain;
   - properties: aspect-ratio, contain-intrinsic-* (size, width, height,
     block-size, inline-size), min-intrinsic-size;
 * Update Color to Level 4 (2025-04-24)
 * Update Values and Units to Level 4 (WD 2024-03-12)
-* Update Display Level 3 to CR 2023-03-30
 * Add support for Ruby Level 1 (WD 2022-12-31)
 * Add support for Transforms Level 2 (WD 2021-11-09)
 * Update Overflow Level 3 to WD 2023-03-29 and add support for Overflow Level 4
   (WD 2023-03-21)
 * Add support for Lists and Counters Level 3 (WD 2020-11-17) and Counter Styles
   Level 3 (WD 2021-07-27)
 
+Substantive updates:
+* Update Align Level 3 to WD 2025-03-11
+* Update Backgrounds Level 3 to CRD 2024-03-11
+* Update Display Level 3 to CR 2023-03-30
+* Update Compositing Level 1 to CRD 2024-03-21
+* Update Images Level 3 to CRD 2023-12-18
+* Update Masking Level 1 to CRD 2021-08-05
+* Update Paged Media Level 3 to WD 2023-09-14
+* Update Position Level 3 to WD 2025-03-11
+* Update Pseudo-Elements Level 4 to WD 2022-12-30
+* Update Shapes Level 1 to CRD 2022-11-15
+* Update User Interface Level 4 to WD 2021-03-16
+
+Documentation-only updates:
+* Update Animations Level 1 to WD 2023-03-02
+* Update Cascade Level 4 to CR 2022-01-13
+* Update Easing Level 1 to CRD 2023-02-13
+* Update Grid Level 1 to CRD 2025-03-26
+* Update Multi-column Layout Level 1 to CR 2024-05-16
+* Update Syntax Level 3 to CRD 2021-12-24
+* Update Text Level 3 to CRD 2024-09-30
+* Update Text Decoration Level 3 to CRD 2022-05-05
+
 ## css-sanitizer 5.5.0 (2025-01-27)
 * Ensure <-token and identifiers are always separated as a security
   paranoia measure

README.md

@@ -61,42 +61,42 @@ The library follows the following grammar specifications:
 
 The sanitizer recognizes the following CSS modules:
 
-* [Align Level 3, 2018-12-06](https://www.w3.org/TR/2018/WD-css-align-3-20181206/)
-* [Animations Level 1, 2018-10-11](https://www.w3.org/TR/2018/WD-css-animations-1-20181011/)
-* [Backgrounds Level 3, 2017-10-17](https://www.w3.org/TR/2017/CR-css-backgrounds-3-20171017/)
+* [Align Level 3, 2025-03-11](https://www.w3.org/TR/2025/WD-css-align-3-20250311/)
+* [Animations Level 1, 2023-03-02](https://www.w3.org/TR/2023/WD-css-animations-1-20230302/)
+* [Backgrounds Level 3, 2024-03-11](https://www.w3.org/TR/2024/CRD-css-backgrounds-3-20240311/)
 * [Break Level 3, 2018-12-04](https://www.w3.org/TR/2018/CR-css-break-3-20181204/)
-* [Cascade Level 4, 2018-08-28](https://www.w3.org/TR/2018/CR-css-cascade-4-20180828)
+* [Cascade Level 4, 2022-01-13](https://www.w3.org/TR/2022/CR-css-cascade-4-20220113/)
 * [Color Level 4, 2025-04-24](https://www.w3.org/TR/2025/CRD-css-color-4-20250424)
-* [Compositing Level 1, 2015-01-13](https://www.w3.org/TR/2015/CR-compositing-1-20150113/)
+* [Compositing Level 1, 2024-03-21](https://www.w3.org/TR/2024/CRD-compositing-1-20240321/)
 * [Counter Styles Level 3, 2021-07-27](https://www.w3.org/TR/2021/CR-css-counter-styles-3-20210727/)
 * [CSS Level 2, 2011-06-07](https://www.w3.org/TR/2011/REC-CSS2-20110607/)
 * [Display Level 3, 2023-03-30](https://www.w3.org/TR/2023/CR-css-display-3-20230330/)
+* [Easing Level 1, 2023-02-13](https://www.w3.org/TR/2023/CRD-css-easing-1-20230213/)
 * [Filter Effects Level 1, 2018-12-18](https://www.w3.org/TR/2018/WD-filter-effects-1-20181218)
 * [Flexbox Level 1, 2018-11-19](https://www.w3.org/TR/2018/CR-css-flexbox-1-20181119)
 * [Fonts Level 3, 2018-09-20](https://www.w3.org/TR/2018/REC-css-fonts-3-20180920)
-* [Grid Level 1, 2017-12-14](https://www.w3.org/TR/2017/CR-css-grid-1-20171214/)
-* [Images Level 3, 2019-10-10](https://www.w3.org/TR/2019/CR-css-images-3-20191010)
+* [Grid Level 1, 2025-03-26](https://www.w3.org/TR/2025/CRD-css-grid-1-20250326/)
+* [Images Level 3, 2023-12-18](https://www.w3.org/TR/2023/CRD-css-images-3-20231218/)
 * [Lists and Counters Level 3, 2020-11-17](https://www.w3.org/TR/2020/WD-css-lists-3-20201117/)
 * [Logical Properties and Values Level 1, 2018-08-27](https://www.w3.org/TR/2018/WD-css-logical-1-20180827/)
-* [Masking Level 1, 2014-08-26](https://www.w3.org/TR/2014/CR-css-masking-1-20140826/)
-* [Multicol Level 1, 2019-10-15](https://www.w3.org/TR/2019/WD-css-multicol-1-20191015)
+* [Masking Level 1, 2021-08-05](https://www.w3.org/TR/2021/CRD-css-masking-1-20210805/)
+* [Multicol Level 1, 2019-10-15](https://www.w3.org/TR/2024/CR-css-multicol-1-20240516/)
 * [Overflow Level 3, 2023-03-29](https://www.w3.org/TR/2023/WD-css-overflow-3-20230329/)
 * [Overflow Level 4, 2023-03-21](https://www.w3.org/TR/2023/WD-css-overflow-4-20230321/)
-* [Page Level 3, 2018-10-18](https://www.w3.org/TR/2018/WD-css-page-3-20181018)
-* [Position Level 3, 2016-05-17](https://www.w3.org/TR/2016/WD-css-position-3-20160517/)
+* [Page Level 3, 2023-09-14](https://www.w3.org/TR/2023/WD-css-page-3-20230914/)
+* [Position Level 3, 2025-03-11](https://www.w3.org/TR/2025/WD-css-position-3-20250311/)
+* [Pseudo-Elements Level 4, 2022-12-30](https://www.w3.org/TR/2022/WD-css-pseudo-4-20221230/)
 * [Ruby Level 1, 2022-12-31](https://www.w3.org/TR/2022/WD-css-ruby-1-20221231/)
-* [Selectors Level 4, 2019-02-25](https://www.w3.org/TR/2019/WD-css-pseudo-4-20190225/)
-* [Shapes Level 1, 2014-03-20](https://www.w3.org/TR/2014/CR-css-shapes-1-20140320/)
+* [Shapes Level 1, 2022-11-15](https://www.w3.org/TR/2022/CRD-css-shapes-1-20221115/)
 * [Sizing Level 3, 2021-12-17](https://www.w3.org/TR/2021/WD-css-sizing-3-20211217/)
 * [Sizing Level 4, 2025-02-24](https://drafts.csswg.org/css-sizing-4/)
-* [Text Level 3, 2019-11-13](https://www.w3.org/TR/2019/WD-css-text-3-20191113)
-* [Text Decorations Level 3, 2019-08-13](https://www.w3.org/TR/2019/CR-css-text-decor-3-20190813)
-* [Easing Level 1, 2019-04-30](https://www.w3.org/TR/2019/CR-css-easing-1-20190430/)
+* [Text Level 3, 2024-09-30](https://www.w3.org/TR/2024/CRD-css-text-3-20240930/)
+* [Text Decorations Level 3, 2022-05-05](https://www.w3.org/TR/2022/CRD-css-text-decor-3-20220505/)
 * [Transforms Level 1, 2019-02-14](https://www.w3.org/TR/2019/CR-css-transforms-1-20190214)
 * [Transforms Level 2, 2021-11-09](https://www.w3.org/TR/2021/WD-css-transforms-2-20211109/)
 * [Transitions Level 1, 2018-10-11](https://www.w3.org/TR/2018/WD-css-transitions-1-20181011)
 * [UI 3 Level 3, 2018-06-21](https://www.w3.org/TR/2018/REC-css-ui-3-20180621)
-* [UI 4 Level 4, 2020-01-02](https://www.w3.org/TR/2020/WD-css-ui-4-20200102)
+* [UI 4 Level 4, 2021-03-16](https://www.w3.org/TR/2021/WD-css-ui-4-20210316/)
 * [Writing Modes Level 4, 2019-07-30](https://www.w3.org/TR/2019/CR-css-writing-modes-4-20190730)
 
 And also,
@@ -181,7 +181,7 @@ Additional release history is in [`HISTORY.md`](./HISTORY.md).
 ---
 [Latest Stable Version]: https://poser.pugx.org/wikimedia/css-sanitizer/v/stable.svg
 [License]: https://poser.pugx.org/wikimedia/css-sanitizer/license.svg
-[CSSSYN]: https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/
+[CSSSYN]: https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/
 [CSSVAL]: https://www.w3.org/TR/2024/WD-css-values-4-20240312/
 [CSSSEL]: https://www.w3.org/TR/2018/REC-selectors-3-20181106/
 [CSSWORK]: https://www.w3.org/Style/CSS/current-work

src/Grammar/AnythingMatcher.php

@@ -17,7 +17,7 @@
  * Matcher that matches anything except bad strings, bad urls, and unmatched
  * left-paren, left-brace, or left-bracket.
  * @warning Be very careful using this!
- * @see https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/#any-value
+ * @see https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/#any-value
  */
 class AnythingMatcher extends Matcher {
 

src/Grammar/Matcher.php

@@ -21,7 +21,7 @@
  * object that will determine whether a ComponentValueList actually matches
  * this grammar.
  *
- * [SYN3]: https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/
+ * [SYN3]: https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/
  * [VAL4]: https://www.w3.org/TR/2024/WD-css-values-4-20240312/
  */
 abstract class Matcher {

src/Grammar/MatcherFactory.php

@@ -116,7 +116,7 @@ public function customIdent( array $exclude = [] ) {
 		$exclude = array_merge( [
 			// https://www.w3.org/TR/2024/WD-css-values-4-20240312/#common-keywords
 			'initial', 'inherit', 'unset', 'default',
-			// https://www.w3.org/TR/2018/CR-css-cascade-4-20180828/#all-shorthand
+			// https://www.w3.org/TR/2022/CR-css-cascade-4-20220113/#all-shorthand
 			'revert'
 		], $exclude );
 		return new TokenMatcher( Token::T_IDENT, static function ( Token $t ) use ( $exclude ) {
@@ -167,7 +167,7 @@ public function cssWideKeywords() {
 			??= new KeywordMatcher( [
 				// https://www.w3.org/TR/2024/WD-css-values-4-20240312/#common-keywords
 				'initial', 'inherit', 'unset',
-				// added by https://www.w3.org/TR/2018/CR-css-cascade-4-20180828/#all-shorthand
+				// added by https://www.w3.org/TR/2022/CR-css-cascade-4-20220113/#all-shorthand
 				'revert'
 			] );
 	}
@@ -774,14 +774,14 @@ public function color() {
 
 	/**
 	 * Matcher for an image value
-	 * @see https://www.w3.org/TR/2019/CR-css-images-3-20191010/#image-values
+	 * @see https://www.w3.org/TR/2023/CRD-css-images-3-20231218/#image-values
 	 * @return Matcher
 	 */
 	public function image() {
 		if ( !isset( $this->cache[__METHOD__] ) ) {
-			// https://www.w3.org/TR/2019/CR-css-images-3-20191010/#gradients
+			// https://www.w3.org/TR/2023/CRD-css-images-3-20231218/#gradients
 			$c = $this->comma();
-			$colorStop = UnorderedGroup::allOf( [
+			$colorStop = new Juxtaposition( [
 				$this->color(),
 				Quantifier::optional( $this->lengthPercentage() ),
 			] );
@@ -891,7 +891,7 @@ public function position() {
 
 	/**
 	 * Matcher for a bg-position value
-	 * @see https://www.w3.org/TR/2017/CR-css-backgrounds-3-20171017/#typedef-bg-position
+	 * @see https://www.w3.org/TR/2024/CRD-css-backgrounds-3-20240311/#typedef-bg-position
 	 * @return Matcher
 	 */
 	public function bgPosition() {
@@ -1135,7 +1135,7 @@ static function ( ComponentValueList $list, GrammarMatch $match, array $options
 
 	/**
 	 * Matcher for single easing functions from CSS Easing Functions Level 1
-	 * @see https://www.w3.org/TR/2019/CR-css-easing-1-20190430/#typedef-easing-function
+	 * @see https://www.w3.org/TR/2023/CRD-css-easing-1-20230213/#typedef-easing-function
 	 * @return Matcher
 	 */
 	public function cssSingleEasingFunction() {
@@ -1486,7 +1486,7 @@ public function cssAttrib() {
 	 * Although this actually only matches the pseudo-selectors defined in the
 	 * following sources:
 	 * - https://www.w3.org/TR/2018/REC-selectors-3-20181106/#pseudo-classes
-	 * - https://www.w3.org/TR/2019/WD-css-pseudo-4-20190225/
+	 * - https://www.w3.org/TR/2022/WD-css-pseudo-4-20221230/
 	 * - https://www.w3.org/TR/2022/WD-selectors-4-20221111/#the-dir-pseudo
 	 *
 	 * @return Matcher
@@ -1519,9 +1519,18 @@ public function cssPseudo() {
 				new Juxtaposition( [
 					$colon,
 					$colon,
-					new KeywordMatcher( [
-						'first-line', 'first-letter', 'before', 'after', 'selection', 'inactive-selection',
-						'spelling-error', 'grammar-error', 'marker', 'placeholder'
+					new Alternative( [
+						new Juxtaposition( [
+							new KeywordMatcher( 'first-letter' ),
+							$colon,
+							$colon,
+							new KeywordMatcher( [ 'prefix', 'postfix' ] ),
+						] ),
+						new KeywordMatcher( [
+							'first-line', 'first-letter', 'before', 'after', 'selection', 'target-text',
+							'spelling-error', 'grammar-error', 'marker', 'placeholder',
+							'file-selector-button',
+						] ),
 					] ),
 				] ),
 			] );
@@ -1533,7 +1542,7 @@ public function cssPseudo() {
 	/**
 	 * An "AN+B" form
 	 *
-	 * https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/#anb-microsyntax
+	 * https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/#anb-microsyntax
 	 *
 	 * @return Matcher
 	 */

src/Grammar/UrangeMatcher.php

@@ -16,7 +16,7 @@
  * "start" and "end" holding T_NUMBER tokens representing the starting and
  * ending codepoints in the range.
  *
- * @see https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/#urange
+ * @see https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/#urange
  */
 class UrangeMatcher extends Matcher {
 	/** @var Matcher Syntax matcher */

src/Objects/Token.php

@@ -468,7 +468,7 @@ public function __toString() {
 
 	/**
 	 * Indicate whether the two tokens need to be separated
-	 * @see https://www.w3.org/TR/2019/CR-css-syntax-3-20190716/#serialization
+	 * @see https://www.w3.org/TR/2021/CRD-css-syntax-3-20211224/#serialization
 	 * @param Token $firstToken
 	 * @param Token $secondToken
 	 * @return bool