python-bleach

SHA256

Go to file

Dominique Leuenberger cf65231a75 Accepting request 790549 from devel:languages:python

- update to 3.1.4 (bsc#1168280, CVE-2020-6817):
  * ``bleach.clean`` behavior parsing style attributes could result in a
    regular expression denial of service (ReDoS).
    Calls to ``bleach.clean`` with an allowed tag with an allowed
    ``style`` attribute were vulnerable to ReDoS. For example,
    ``bleach.clean(..., attributes={'a': ['style']})``.
  * Style attributes with dashes, or single or double quoted values are
    cleaned instead of passed through.

- update to 3.1.3 (bsc#1167379, CVE-2020-6816):

OBS-URL: https://build.opensuse.org/request/show/790549
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-bleach?expand=0&rev=10

2020-04-05 18:51:47 +00:00

.gitattributes

Accepting request 235461 from home:frispete:python

2014-06-02 09:05:03 +00:00

.gitignore

Accepting request 235461 from home:frispete:python

2014-06-02 09:05:03 +00:00

bleach-3.1.4.tar.gz

- update to 3.1.4 (bsc#1168280, CVE-2020-6817):

2020-04-01 11:21:16 +00:00

de-vendor.patch

- update to 3.1.3 (bsc#1167379):