e4b41e9dad
- Update to 0.4.4 * Fixed a bug where Unicode escapes in CSS were not properly decoded before security checks. This prevents attackers from bypassing filters using escape sequences. (CVE-2026-28348) (bsc#1259378) * Fixed a security issue where <base> tags could be used for URL hijacking attacks. The <base> tag is now automatically removed whenever the <head> tag is removed (via page_structure=True or manual configuration), as <base> must be inside <head> according to HTML specifications. (CVE-2026-28350) (bsc#1259379)
Eric Schirra2026-03-10 12:22:43 +00:00
dd6bffd490
- Update to 0.4.3: * Tests updated to work correctly with new lxml and libxml2 releases. * Python 3.6 and 3.7 are no longer tested.
Steve Kowalik2025-10-10 05:38:58 +00:00
6dbb42eb28
Accepting request 1268729 from devel:languages:python
Ana Guerrero2025-04-14 10:55:59 +00:00
1c8061d5b1
- update to 0.4.2: * lxml_html_clean now correctly handles HTML input as bytes as it did before the 0.2.0 release.
Dirk Mueller2025-04-11 20:57:31 +00:00
007d5300c8
- update to 0.4.2: * lxml_html_clean now correctly handles HTML input as bytes as it did before the 0.2.0 release.
Dirk Mueller2025-04-11 20:57:31 +00:00