Skip to content

Bump bleach from 3.2.1 to 3.3.0

Studieverening via bot requested to merge dependabot/pip/bleach-3.3.0 into master

Bumps bleach from 3.2.1 to 3.3.0.

Changelog

Sourced from bleach's changelog.

Version 3.3.0 (February 1st, 2021)

Backwards incompatible changes

  • clean escapes HTML comments even when strip_comments=False

Security fixes

  • Fix bug 1621692 / GHSA-m6xf-fq7q-8743. See the advisory for details.

Features

None

Bug fixes

None

Version 3.2.3 (January 26th, 2021)

Security fixes

None

Features

None

Bug fixes

  • fix clean and linkify raising ValueErrors for certain inputs. Thank you @Google-Autofuzz.

Version 3.2.2 (January 20th, 2021)

Security fixes

None

Features

  • Migrate CI to Github Actions. Thank you @hugovk.

Bug fixes

  • fix linkify raising an IndexError on certain inputs. Thank you @Google-Autofuzz.
Commits
  • 79b7a3c Merge pull request from GHSA-vv2x-vrpj-qqpq
  • 842fcb4 Update for v3.3.0 release
  • 1334134 sanitizer: escape HTML comments
  • c045a8b Merge pull request #581 from mozilla/nit-fixes
  • 491abb0 fix typo s/vnedoring/vendoring/
  • 10b1c5d vendor: add html5lib-1.1.dist-info/REQUESTED
  • cd838c3 Merge pull request #579 from mozilla/validate-convert-entity-code-points
  • 612b808 Update for v3.2.3 release
  • 6879f6a html5lib_shim: validate unicode points for convert_entity
  • 90cb80b Update for v3.2.2 release
  • Additional commits viewable in compare view

Merge request reports