delta/python-lxml.git/src/lxml/html/tests, branch lxml-4.6 github.com: lxml/lxml.git Fix a test in Py2. 2021-12-12T14:23:49+00:00 Stefan Behnel stefan_ml@behnel.de 2021-12-12T14:23:49+00:00 a9611ba80bc5196c1dd07a0b1964fcb603695d63 






Cleaner: cover some more cases where scripts could sneak through in specially crafted style content.
2021-12-11T11:19:21+00:00

Stefan Behnel
stefan_ml@behnel.de

2021-12-11T11:19:21+00:00

69a747356655158fdf9abaecea5feafb3bd6b5f5












Cleaner: Remove SVG image data URLs since they can embed script content.
2021-11-11T14:39:27+00:00

Stefan Behnel
stefan_ml@behnel.de

2021-11-11T12:21:08+00:00

f2330237440df7e8f39c3ad1b1aa8852be3b27c0

Reported as GHSL-2021-1038





Reported as GHSL-2021-1038







Cleaner: Prevent "@import" from re-occurring in the CSS after replacements, e.g. "@@importimport".
2021-11-11T12:19:30+00:00

Stefan Behnel
stefan_ml@behnel.de

2021-11-11T11:20:57+00:00

12fa9669007180a7bb87d990c375cf91ca5b664a

Reported as GHSL-2021-1037





Reported as GHSL-2021-1037







Add HTML-5 "formaction" attribute to "defs.link_attrs" (GH-316)
2021-03-21T14:03:09+00:00

Kevin Chung
kchung@nyu.edu

2021-03-21T14:03:09+00:00

2d01a1ba8984e0483ce6619b972832377f208a0d

Resolves https://bugs.launchpad.net/lxml/+bug/1888153
See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28957




Resolves https://bugs.launchpad.net/lxml/+bug/1888153
See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28957






Prevent combinations of <math/svg> and <style> to sneak JavaScript through the HTML cleaner.
2020-11-26T08:20:52+00:00

Stefan Behnel
stefan_ml@behnel.de

2020-11-26T08:20:52+00:00

a105ab8dc262ec6735977c25c13f0bdfcdec72a7












Prevent combinations of <noscript> and <style> to sneak JavaScript through the HTML cleaner.
2020-10-18T08:06:46+00:00

Stefan Behnel
stefan_ml@behnel.de

2020-10-18T08:06:46+00:00

89e7aad6e7ff9ecd88678ff25f885988b184b26e












html: Add InputGetter.items() method and make .keys() return the field names in document order.
2020-08-12T06:14:00+00:00

Stefan Behnel
stefan_ml@behnel.de

2020-08-12T06:14:00+00:00

0b23ce6b61047303b1c9dc93a56bdaa6ba703793












Cleaner: Catch bad arg combo in constructor (GH-301)
2020-06-20T06:47:45+00:00

Mike Lissner
mike@free.law

2020-06-20T06:47:45+00:00

99653f6dd238668d4abe4df5926b490d8414e31e

Fixes https://bugs.launchpad.net/lxml/+bug/1882606




Fixes https://bugs.launchpad.net/lxml/+bug/1882606






LP#1882606: ``Cleaner.clean_html()`` discarded comments and PIs regardless of the corresponding configuration option, if "remove_unknown_tags=True" was set.
2020-06-13T20:35:03+00:00

Stefan Behnel
stefan_ml@behnel.de

2020-06-13T20:35:03+00:00

dd2d80a416e0aa5e177a723bcd571acf83a4c06a