Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bleach is deprecated #5509

Open
mattiaverga opened this issue Oct 9, 2023 · 1 comment
Open

Bleach is deprecated #5509

mattiaverga opened this issue Oct 9, 2023 · 1 comment
Labels
medium-gain medium-trouble

Comments

@mattiaverga
Copy link
Contributor

Bleach is deprecated and its maintenance will soon be dropped by upstream.
We should switch to ammonia (rust) + nh3 (its python bindings) or html-sanitizer (python native).
@mattiaverga mattiaverga added this to the 8.0 milestone Oct 9, 2023
@mattiaverga
Copy link
Contributor Author

ammonia + nh3 are the best replacements here, but they currently are not 100% compatible with bleach, because they completely remove unallowed tags, while bleach just escape them. We'll need to wait and see if ammonia developers are going to implement the choice to escape unallowed tags.

Also, there's no replacement for bleach.linkify(), so we might need to find another solution for that.

@mattiaverga mattiaverga removed this from the 8.0 milestone Oct 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
medium-gain medium-trouble
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mattiaverga