Properly use HMAC for secure munging.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Fix quadratic behavior in DOMLex due to array_shift.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Improve gitignore.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Implementation of a Zipper, for efficient splice.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Properly handle context variables that are NULL.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Use a Zipper to process MakeWellFormed, removing quadratic behavior.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Remove PHP 4 compatibility hack.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Remove some unnecessary pass-by-reference.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Make the Token class abstract.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Add conversion functions for our own tree format.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Rewrite FixNesting implementation to be tree-based.

This mega-patch rips out the FixNesting implementation and the related
ChildDef components.  The primary algorithmic change is to convert from
use of tokens to tree nodes, which are far more amenable to the style
of processing that FixNesting uses.  Additionally, FixNesting has been
changed to go bottom-up rather than top-down, in order to avoid needing
to implement backtracking.

This patch simplifies a good deal of the relevant logic, since we no
longer need to continually recalculate the nesting structure when
processing things.  However, the conversion to the alternate format
incurs some overhead, so for small inputs these changes are not a win.
One possibility to greatly reduce the constant factors here is to switch
to entirely using libxml's representation, and never serializing tokens;
this would require one to rewrite injectors, however.

The iterative post-order traversal in FixNesting is a bit subtle, but
we have essentially reified the stack and continuations.

We've removed support for %Core.EscapeInvalidChildren.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Fix < PHP 5.4 compatibility break. Thanks GromNaN for submitting the patch.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Fix infinite loop in Lexer.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Add Twitter handle to release notes.

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>
Conditionalize hash_hmac tests for 5.0

Signed-off-by: Edward Z. Yang <ezyang@mit.edu>