Investigate better HTML diffing libraries to replace HTMLPurifier

Created on 23 May 2024, 7 months ago

See https://www.drupal.org/project/diff/issues/3440375#comment-15551007 📌 Cut a 2.x branch Active

📌 Task

Status

Active

Version

2.0

Component

Code

Created by

🇦🇺Australia acbramley

Live updates comments and jobs are added and updated live.

Comments & Activities

Issue created by @acbramley
Comment 25 days ago →
🇬🇧United Kingdom malcomio
See also https://github.com/advisories/GHSA-jw86-5cjf-mv79

HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file
Comment 6 days ago →
heddn Nicaragua
The strongest motivator here was a security vulnerability upstream. Do we still feel a need to investigate alternatives?

Production build 0.71.5 2024