mozilla / bleach

Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes

https://bleach.readthedocs.io/en/latest/

mozilla/bleach Issues

feature: please provide update for latest `tinycss2==1.3`
Updated 2 months ago
bleach is deprecated; statement on project going forward (2023-01-23)
Updated 4 months ago11
RFE: move away from deprecated `html5lib`
Closed 4 months ago1
Open bracket '<' still cleaned up without closing bracket
Updated 4 months ago
Style attributes are getting stripped off
Closed 9 months ago13
RFE: please provide update for latest `tinycss2` 1.2.1
Closed 9 months ago2
handle URLs with an IP and port (but no scheme)
Closed 9 months ago2
tox utility environments are constrainted to only run on Linux
Closed 9 months ago1
Open angle bracket '<' with few words after cleaned up if there's no closing bracket
Closed 9 months ago1
feature: support for native sanitizer API builtins and configuration
Closed 9 months ago1
fork html5lib-python or find alternative
Closed 9 months ago1
bug: linkify with entities inside anchor strings are incorrectly escaped
Closed 9 months ago1
Possible to only allow target="_blank" but no other values?
Closed 9 months ago3
feature: add support for Python 3.12
Closed 10 months ago
bug: drop support for Python 3.7 which is EOL
Closed 10 months ago
bug: Cleaner removes href valid tag "tg://user?id=124124124"
Closed a year ago1
bug: using OpenSUSE and Fedora packages which change the Bleach code, parse_shim tests fail with Python 3.10.12
Closed a year ago6
RFE: lease drop use `six` module
Closed a year ago1
bug: allowed_elements in BleachSanitizerFilter is different from html5lib_shim.SanitizerFilter
Closed a year ago7
bug: Linkify incorrectly parses query params starting with "&para"
Closed 2 years ago3
bug: bleach truncates Katex style attributes
Closed 2 years ago7
support python 3.11 (october 3rd, 2022)
Closed 2 years ago
bug: bleach.clean is not handling & symbol very well
Closed 2 years ago1
remove six from dependencies
Updated 2 years ago4
feature: strip all URLs
Closed 2 years ago2
bug: hardcoded dev dependency versions breaks mypy usage
Closed 2 years ago5
Solo quiero decir que Bleach vuelve en octubre ❤️💪😎🍷💕
Closed 2 years ago
task: check bleach url sanitizing and urlparse against wpt url tests
Updated 2 years ago1
bug: Relative url is removed when the allowed protocol is https
Closed 2 years ago5
[bug] 5.0.0: sphinx warnings `reference target not found`
Closed 2 years ago1
bug: `\n` when stripping nested tags
Closed 2 years ago5
bug: `linkify` with `parse_email=True` doesn't handle "%" a "?" in `addr-specs`
Closed 2 years ago4
bug: possible regression in CSS parsing of advanced expressions
Closed 2 years ago1
TLD list is outdated
Closed 2 years ago4
rework how bleach.clean sanitizes css
Closed 2 years ago7
bug: bleach.clean removing html and body tags even when explicitly allowed
Closed 2 years ago2
update goals / non-goals
Closed 2 years ago
drop packaging dependency
Closed 2 years ago
fix CI checks that are failing
Closed 2 years ago1
move requirements in requirements-dev.in to setup.py
Closed 2 years ago2
readthedocs isn't updating
Closed 2 years ago1
drop CODE_OF_CONDUCT.rst
Closed 2 years ago
How to be compatible with html5lib's sanitization?
Closed 2 years ago9
Q: vendoring `html5lib` and `parse`
Closed 2 years ago2
bug: Build to Upgrade bleach to 3.3.0 is failing due to django-incident-response 0.5.1 depends on bleach 3.1.4
Closed 2 years ago1
feature:
Closed 3 years ago
bug: CSS styles starting with a dash are not supported (-webkit-xxx, etc.)
Closed 3 years ago1
bug: Linkify does link "M.Sc." in text
Closed 3 years ago5
feature: Should lxml and genshi be listed explicitly in some configuration files?
Closed 3 years ago1
ModuleNotFoundError:
Closed 3 years ago