19
0
anag_factory 6a9f37011d Accepting request 1363833 from devel:languages:python
- update to 0.4.5 (bsc#1270285, CVE-2026-49825):
  * Fixed a security vulnerability where javascript: URLs in
    xlink:href attributes were not sanitized
    when``safe_attrs_only=False``, allowing cross-site scripting
    (XSS) attacks. The fix requires lxml>=6.1.1, which adds
    xlink:href to the set of link attributes iterated by
    rewrite_links(). Reported by Guillem Lefait (@glefait).

OBS-URL: https://build.opensuse.org/request/show/1363833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-lxml_html_clean?expand=0&rev=6
2026-07-06 10:31:36 +00:00
2026-07-05 09:49:25 +00:00
2026-07-05 09:49:25 +00:00
2026-07-05 09:49:25 +00:00
S
Description
No description provided
61 KiB
Languages
RPM Spec 100%