10000 Tags · doytsujin/bluemonday · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Tags: doytsujin/bluemonday

Tags

v1.0.15

Toggle v1.0.15's commit message 
Fix escaping of HTML attributes

The escaping of attributes should have been handled according to
https://html.spec.whatwg.org/multipage/parsing.html#escapingString
and as it was not, it allowed the possibility of an XSS by overloading
a known attribute like the href. This can be seen in the test within
this commit and is recognised as a vulnerability that existed prior
to this commit.

Additional update to the versions of modules we depend upon

v1.0.14

Toggle v1.0.14's commit message 
Allow the last commit to work on old go versions

Also tidy up some comments

v1.0.13

Toggle v1.0.13's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode 
Merge pull request microcosm-cc#125 from KN4CK3R/additive-policies

Additive policies

v1.0.12

Toggle v1.0.12's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode 
Merge pull request microcosm-cc#124 from microcosm-cc/buro9/reorg

Minor re-org to improve documentation readability

v1.0.11

Toggle v1.0.11's commit message 
Better support for linkable elements that aren't by default safe

v1.0.10

Toggle v1.0.10's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode 
Merge pull request microcosm-cc#121 from microcosm-cc/buro9/95

Resolves microcosm-cc#95 by allowing HTML comments

v1.0.9

Toggle v1.0.9's commit message 
Add test for quotes to prevent regression on the ASCII SCRIPT issue

v1.0.8

Toggle v1.0.8's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode 
Update .travis.yml

Expand to include newer versions of Go

v1.0.7

Toggle v1.0.7's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode 
Merge pull request microcosm-cc#115 from zeripath/empty-query-keys

Sanitize should not add forcibly add values to query components

v1.0.6

Toggle v1.0.6's commit message 
Clarify version of douceur
0