Update to KaTeX v0.9.0

plugins/tiddlywiki/katex/files/README.md

@@ -1,5 +1,6 @@
-# [<img src="https://khan.github.io/KaTeX/katex-logo.svg" width="130" alt="KaTeX">](https://khan.github.io/KaTeX/) [![Build Status](https://travis-ci.org/Khan/KaTeX.svg?branch=master)](https://travis-ci.org/Khan/KaTeX)
-
+# [<img src="https://khan.github.io/KaTeX/katex-logo.svg" width="130" alt="KaTeX">](https://khan.github.io/KaTeX/)
+[![Build Status](https://travis-ci.org/Khan/KaTeX.svg?branch=master)](https://travis-ci.org/Khan/KaTeX)
+[![codecov](https://codecov.io/gh/Khan/KaTeX/branch/master/graph/badge.svg)](https://codecov.io/gh/Khan/KaTeX)
 [![Join the chat at https://gitter.im/Khan/KaTeX](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/Khan/KaTeX?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
 
 KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web.
@@ -16,8 +17,8 @@ KaTeX supports all major browsers, including Chrome, Safari, Firefox, Opera, Edg
 You can [download KaTeX](https://github.com/khan/katex/releases) and host it on your server or include the `katex.min.js` and `katex.min.css` files on your page directly from a CDN:
 
 ```html
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta/katex.min.css" integrity="sha384-L/SNYu0HM7XECWBeshTGLluQO9uVI1tvkCtunuoUbCHHoTH76cDyXty69Bb9I0qZ" crossorigin="anonymous">
-<script src="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta/katex.min.js" integrity="sha384-ad+n9lzhJjYgO67lARKETJH6WuQVDDlRfj81AJJSswMyMkXTD49wBj5EP004WOY6" crossorigin="anonymous"></script>
+<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta1/katex.min.css" integrity="sha384-VEnyslhHLHiYPca9KFkBB3CMeslnM9CzwjxsEbZTeA21JBm7tdLwKoZmCt3cZTYD" crossorigin="anonymous">
+<script src="https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.9.0-beta1/katex.min.js" integrity="sha384-O4hpKqcplNCe+jLuBVEXC10Rn1QEqAmX98lKAIFBEDxZI0a+6Z2w2n8AEtQbR4CD" crossorigin="anonymous"></script>
 ```
 
 #### In-browser rendering
@@ -41,6 +42,26 @@ var html = katex.renderToString("c = \\pm\\sqrt{a^2 + b^2}");
 
 Make sure to include the CSS and font files, but there is no need to include the JavaScript. Like `render`, `renderToString` throws if it can't parse the expression.
 
+#### Security
+
+Any HTML generated by KaTeX *should* be safe from `<script>` or other code
+injection attacks.
+(See `maxSize` below for preventing large width/height visual affronts.)
+Of course, it is always a good idea to sanitize the HTML, though you will need
+a rather generous whitelist (including some of SVG and MathML) to support 
+all of KaTeX.
+
+#### Handling errors
+
+If KaTeX encounters an error (invalid or unsupported LaTeX), then it will
+throw an exception of type `katex.ParseError`.  The message in this error
+includes some of the LaTeX source code, so needs to be escaped if you want
+to render it to HTML.  In particular, you should convert `&`, `<`, `>`
+characters to `&amp;`, `&lt;`, `&gt;` (e.g., using `_.escape`)
+before including either LaTeX source code or exception messages in your
+HTML/DOM.  (Failure to escape in this way makes a `<script>` injection
+attack possible if your LaTeX source is untrusted.)
+
 #### Rendering options
 
 You can provide an object of options as the last argument to `katex.render` and `katex.renderToString`. Available options are:
@@ -106,6 +127,9 @@ will appear larger than 1cm in browser units.
 ### Angular2+
 - [ng-katex](https://github.com/garciparedes/ng-katex) Angular module to write beautiful math expressions with TeX syntax boosted by KaTeX library
 
+### Ruby
+
+- [katex-ruby](https://github.com/glebm/katex-ruby) Provides server-side rendering and integration with popular Ruby web frameworks (Rails, Hanami, and anything that uses Sprockets).
 
 ## Contributing