Module: Loofah::LibxmlWorkarounds

Defined in:: lib/loofah/html5/libxml2_workarounds.rb

Overview

constants related to working around unhelpful libxml2 behavior

ಠ_ಠ

Constant Summary collapse

BROKEN_ESCAPING_ATTRIBUTES = these attributes and qualifying parent tags are determined by the code at: https://git.gnome.org/browse/libxml2/tree/HTMLtree.c?h=v2.9.2#n714 see comments about CVE-2018-8048 within the tests for more information

Set.new([
  "href",
  "action",
  "src",
  "name",
])

BROKEN_ESCAPING_ATTRIBUTES_QUALIFYING_TAG =

{ "name" => "a" }