ruby-sanitize 6.0.0-1.1ubuntu0.23.10.1 source package in Ubuntu
Changelog
ruby-sanitize (6.0.0-1.1ubuntu0.23.10.1) mantic-security; urgency=medium
* SECURITY UPDATE: XSS via style element when using "relaxed" or custom
config
- debian/patches/CVE-2023-36823.patch: prevent style element from
premature close by escaping "</" in
lib/sanitize/transformers/clean_css.rb.
- CVE-2023-36823
-- Evan Caville <email address hidden> Fri, 19 Apr 2024 12:30:54 +1000
Upload details
- Uploaded by:
- Evan Caville
- Uploaded to:
- Mantic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- ruby
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section | |
|---|---|---|---|---|
| Mantic | updates | universe | misc | |
| Mantic | security | universe | misc |
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| ruby-sanitize_6.0.0.orig.tar.gz | 41.8 KiB | 1c66c7bc589b48911d97495f0ee4a96698b07242950a9d1f21ba61a3612d8cf4 |
| ruby-sanitize_6.0.0-1.1ubuntu0.23.10.1.debian.tar.xz | 17.6 KiB | 0f3c62f6a19b7d8e79df340081f80f494e412b64ab96f3fc8001f8ecf68a6e6c |
| ruby-sanitize_6.0.0-1.1ubuntu0.23.10.1.dsc | 2.2 KiB | 39b3f40ecd923c6e35627e748f0363f2a818ac1a53ef46df8275bb36f4163267 |
Available diffs
Binary packages built by this source
- ruby-sanitize: whitelist-based HTML sanitizer
Sanitize is a whitelist-based HTML sanitizer. Given a list of acceptable
elements and attributes, Sanitize will remove all unacceptable HTML from a
string.
.
Using a simple configuration syntax, you can tell Sanitize to allow certain
elements, certain attributes within those elements, and even certain URL
protocols within attributes that contain URLs. Any HTML elements or attributes
that you don't explicitly allow will be removed.
.
Because it's based on Nokogiri, a full-fledged HTML parser, rather than a bunch
of fragile regular expressions, Sanitize has no trouble dealing with malformed
or maliciously-formed HTML and returning safe output.
