v1.13.0

What's Changed

• 🐛 fix(sanitize): check meta refresh redirect URLs by @gaborbernat in #920
• 🐛 fix(bleach): check the decoded URL scheme against protocols by @gaborbernat in #919
• 🐛 fix(xslt): refuse imports that are not regular files by @gaborbernat in #922
• 🐛 fix(xml): read DOCTYPE literals as literals in parse_xml by @gaborbernat in #926
• 🐛 fix(serialize): keep XML nodes inert in HTML output by @gaborbernat in #921
• 📝 docs: warn about raw builder text and unsanitized feeds by @gaborbernat in #927
• 🐛 fix(rewrite): write raw-text element content unescaped by @gaborbernat in #925
• 🐛 fix(css): keep tokens apart when dropping comments or spaces by @gaborbernat in #924
• ✨ feat(xslt): add strparam to pass text as a parameter by @gaborbernat in #928
• 🐛 fix(markdown): keep wrapped list headings by @gaborbernat in #929
• 🐛 fix(markdown): keep list markers in cells by @gaborbernat in #930
• 🐛 fix(js): keep folded strings out of the directive prologue by @gaborbernat in #923
• 🐛 fix(markdown): keep code word boundaries by @gaborbernat in #932

Full Changelog: 1.12.0...1.13.0