Accepting request 780475 from devel:languages:python

OBS-URL: https://build.opensuse.org/request/show/780475
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-bleach?expand=0&rev=8

bleach-3.1.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3fdf7f77adcf649c9911387df51254b813185e32b2c6619f690b593a617e19fa
-size 167814

bleach-3.1.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:aa8b870d0f46965bac2c073a93444636b0e1ca74e9777e34f03dd494b8a59d48
+size 174885

python-bleach.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Fri Feb 28 16:13:43 UTC 2020 - Alexandros Toptsoglou <atoptsoglou@suse.com>
+
+- Update to V3.1.1: Security update for CVE-2020-6802  
+
+  * CVE-2020-6802: Fixed mutation XSS vulnerabilities (bsc#1165303). 
+
+-------------------------------------------------------------------
+Wed Jan  8 10:35:41 CET 2020 - Matej Cepl <mcepl@suse.com>
+
+- Switch off test_uri_value_allowed_protocols test to work around
+  gh#mozilla/bleach#503.
+
 -------------------------------------------------------------------
 Fri Jul 19 12:02:58 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
 

python-bleach.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-bleach
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 # Copyright (c) 2015 LISA GmbH, Bingen, Germany.
 #
 # All modifications and additions to the file contributed by third parties
@@ -19,12 +19,12 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-bleach
-Version:        3.1.0
+Version:        3.1.1
 Release:        0
 Summary:        A whitelist-based HTML-sanitizing tool
 License:        Apache-2.0
 Group:          Development/Languages/Python
-URL:            http://github.com/jsocol/bleach
+URL:            https://github.com/jsocol/bleach
 Source:         https://files.pythonhosted.org/packages/source/b/bleach/bleach-%{version}.tar.gz
 Patch0:         de-vendor.patch
 BuildRequires:  %{python_module html5lib >= 1.0.0}
@@ -67,7 +67,8 @@ rm -rf bleach/_vendor
 %python_expand %fdupes %{buildroot}%{$python_sitelib}
 
 %check
-%pytest
+# gh#mozilla/bleach#503
+%pytest -k 'not test_uri_value_allowed_protocols'
 
 %files %{python_files}
 %license LICENSE