Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Commit f9888c9

Browse filesBrowse files
committed
fixup! Fix #153: Sanitizer fails to treat some attributes as URLs
1 parent 165bf4c commit f9888c9
Copy full SHA for f9888c9

File tree

1 file changed

+6
-0
lines changed
Filter options

1 file changed

+6
-0
lines changed

‎CHANGES.rst

Copy file name to clipboardExpand all lines: CHANGES.rst
+6Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,12 @@ Change Log
66

77
Released on April 29, 2015
88

9+
* Fix #153: Sanitizer fails to treat some attributes as URLs. Despite how
10+
this sounds, this has no known security implications. No known version
11+
of IE (5.5 to current), Firefox (3 to current), Safari (6 to current),
12+
Chrome (1 to current), or Opera (12 to current) will run any script
13+
provided in these attributes.
14+
915
* Pass error message to the ParseError exception in strict parsing mode.
1016

1117
* Allow data URIs in the sanitizer, with a whitelist of content-types.

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.