Skip to content

Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attribute (#1573) - #1575

Merged
ikedas merged 4 commits into
sympa-community:mainfrom
ikedas:issue-1573
Feb 2, 2023
Merged

Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attribute (#1573)#1575
ikedas merged 4 commits into
sympa-community:mainfrom
ikedas:issue-1573

Conversation

@ikedas

@ikedas ikedas commented Jan 7, 2023

Copy link
Copy Markdown
Member

This may fix #1573 .

@ikedas ikedas changed the title Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attribute. Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attributeb (#1573) Jan 7, 2023
@ikedas ikedas changed the title Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attributeb (#1573) Sympa::HTMLSanitizer: Avoid bug in HTML::StripScripts, reDoS with style attribute (#1573) Jan 7, 2023
@ikedas ikedas added the bug label Jan 7, 2023
@ikedas
ikedas force-pushed the issue-1573 branch 3 times, most recently from c559403 to 0411f83 Compare January 9, 2023 00:22
@ikedas ikedas mentioned this pull request Jan 9, 2023
Closed
@ikedas
Additional bug fixes:
d63b055 
  - Unintended types of URIs were allowed.
  - The lengths of URIs were not limited.
@ikedas
ikedas force-pushed the issue-1573 branch from ed3c7d3 to d63b055