diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,7 @@
+# 0.3.7.1
+
+add max height and max width as valid style attributes
+
 # 0.3.7
 
 clear the contents of style and script tags instead of escaping them
diff --git a/src/Text/HTML/SanitizeXSS/Css.hs b/src/Text/HTML/SanitizeXSS/Css.hs
--- a/src/Text/HTML/SanitizeXSS/Css.hs
+++ b/src/Text/HTML/SanitizeXSS/Css.hs
@@ -114,9 +114,9 @@
       "border-left-color", "border-right-color", "border-top-color", "clear",
       "color", "cursor", "direction", "display", "elevation", "float", "font",
       "font-family", "font-size", "font-style", "font-variant", "font-weight",
-      "height", "letter-spacing", "line-height", "overflow", "pause",
-      "pause-after", "pause-before", "pitch", "pitch-range", "richness",
-      "speak", "speak-header", "speak-numeral", "speak-punctuation",
+      "height", "letter-spacing", "line-height", "max-height", "max-width",
+      "overflow", "pause", "pause-after", "pause-before", "pitch", "pitch-range",
+      "richness", "speak", "speak-header", "speak-numeral", "speak-punctuation",
       "speech-rate", "stress", "text-align", "text-decoration", "text-indent",
       "unicode-bidi", "vertical-align", "voice-family", "volume",
       "white-space", "width"]
diff --git a/xss-sanitize.cabal b/xss-sanitize.cabal
--- a/xss-sanitize.cabal
+++ b/xss-sanitize.cabal
@@ -1,11 +1,11 @@
 cabal-version: 1.12
 
--- This file has been generated from package.yaml by hpack version 0.34.4.
+-- This file has been generated from package.yaml by hpack version 0.35.0.
 --
 -- see: https://github.com/sol/hpack
 
 name:           xss-sanitize
-version:        0.3.7
+version:        0.3.7.1
 synopsis:       sanitize untrusted HTML to prevent XSS attacks
 description:    run untrusted HTML through Text.HTML.SanitizeXSS.sanitizeXSS to prevent XSS attacks. see README.md <http://github.com/yesodweb/haskell-xss-sanitize> for more details
 category:       Web
@@ -40,7 +40,7 @@
     , css-text >=0.1.1 && <0.2
     , network-uri >=2.6
     , tagsoup >=0.12.2 && <1
-    , text >=0.11 && <2
+    , text >=0.11 && <2.1
     , utf8-string >=0.3 && <1.1
   default-language: Haskell2010
 
@@ -64,6 +64,6 @@
     , hspec >=1.3
     , network-uri >=2.6
     , tagsoup >=0.12.2 && <1
-    , text >=0.11 && <2
+    , text >=0.11 && <2.1
     , utf8-string >=0.3 && <1.1
   default-language: Haskell2010