hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(deps): replace mdex with earmark parser

Browse source
This commit is contained in:
Lain Soykaf 2026-07-23 13:02:28 +04:00
commit bf477c1a53
No known key found for this signature in database
7 changed files with 209 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

2
changelog.d/earmark-mdex.security
View file

@ -1 +1 @@
Replace retired Earmark markdown rendering with MDEx to address stored XSS in link attributes.
Replace retired Earmark rendering with the maintained EarmarkParser and an attribute-escaping renderer.