{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":383434825,"defaultBranch":"main","name":"html-sanitizer","ownerLogin":"TYPO3","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-07-06T10:50:14.000Z","ownerAvatar":"https://github.com/avatars/u/88698?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1720799694.0","currentOid":""},"activityList":{"items":[{"before":"b8f90717251d968c49dc77f8c1e5912e2fbe0dff","after":"c672a2e02925de8eed0dcaeb3a3c90d3642049a0","ref":"refs/heads/main","pushedAt":"2024-07-12T15:52:25.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Avoid implicitly nullable method parameter\n\nImplicit nullable method parameters are deprecated\nwith PHP 8.4. The patch prepares affected method\nsignatures.","shortMessageHtmlLink":"[TASK] Avoid implicitly nullable method parameter"}},{"before":"070009f5441574a9edab19c2d2d5291eebe94b7c","after":"cead6b60be7122c9e6bdc40f702ca8b5980abca4","ref":"refs/heads/v1.5","pushedAt":"2023-11-14T07:52:47.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[SECURITY] Deny processing instructions\n\nXML processing instructions (e.g. `<?xml>`)\nare denied during the sanitization process.","shortMessageHtmlLink":"[SECURITY] Deny processing instructions"}},{"before":"67876f6fec6ee5b6ea30d920088bf1487ab7afb6","after":"b8f90717251d968c49dc77f8c1e5912e2fbe0dff","ref":"refs/heads/main","pushedAt":"2023-11-14T07:52:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[SECURITY] Deny processing instructions\n\nXML processing instructions (e.g. `<?xml>`)\nare denied during the sanitization process.","shortMessageHtmlLink":"[SECURITY] Deny processing instructions"}},{"before":"bd5c5731e84c73f0e7fe8983d34d65b38487cf90","after":"070009f5441574a9edab19c2d2d5291eebe94b7c","ref":"refs/heads/v1.5","pushedAt":"2023-10-20T12:31:21.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Adjust test case for PHP 7.0","shortMessageHtmlLink":"[TASK] Adjust test case for PHP 7.0"}},{"before":"d06029f3db51316d9cc1b3032dc6bf36caeb8d4c","after":"bd5c5731e84c73f0e7fe8983d34d65b38487cf90","ref":"refs/heads/v1.5","pushedAt":"2023-10-20T12:20:40.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[BUGFIX] Correctly import nodes with different owner document","shortMessageHtmlLink":"[BUGFIX] Correctly import nodes with different owner document"}},{"before":"d0bc7b233f201ceae1468eddc24bbb60a7866b5a","after":"67876f6fec6ee5b6ea30d920088bf1487ab7afb6","ref":"refs/heads/main","pushedAt":"2023-10-20T12:19:06.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[BUGFIX] Correctly import nodes with different owner document","shortMessageHtmlLink":"[BUGFIX] Correctly import nodes with different owner document"}},{"before":"f2238de9ecd840bfcbe5dd125f0aecda75f19852","after":"d0bc7b233f201ceae1468eddc24bbb60a7866b5a","ref":"refs/heads/main","pushedAt":"2023-10-20T12:18:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Streamline logging\n\nAdded logging for encoding #comment and #cdata nodes,\nand for nodes that were completely removed. All log items\nwere enriched with the `nodeType (int)` property [1].\n\n[1] https://www.php.net/manual/en/dom.constants.php","shortMessageHtmlLink":"[TASK] Streamline logging"}},{"before":"a35f220b2336e3f040f91d3de23d19964833643f","after":"f2238de9ecd840bfcbe5dd125f0aecda75f19852","ref":"refs/heads/main","pushedAt":"2023-09-21T15:40:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Disable test for unicode non breaking spaces substitution (#112)\n\nsee https://github.com/TYPO3/html-sanitizer/commit/a35f220b2336e3f040f91d3de23d19964833643f","shortMessageHtmlLink":"[TASK] Disable test for unicode non breaking spaces substitution (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1907266736\" data-permission-text=\"Title is private\" data-url=\"https://github.com/TYPO3/html-sanitizer/issues/112\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/TYPO3/html-sanitizer/pull/112/hovercard\" href=\"https://github.com/TYPO3/html-sanitizer/pull/112\">#112</a>)"}},{"before":"f27bfed266b099e7ea46e95f0ce7d4b069defe67","after":"d06029f3db51316d9cc1b3032dc6bf36caeb8d4c","ref":"refs/heads/v1.5","pushedAt":"2023-09-21T15:40:13.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Disable test for unicode non breaking spaces substitution (#113)\n\nsee https://github.com/TYPO3/html-sanitizer/commit/a35f220b2336e3f040f91d3de23d19964833643f","shortMessageHtmlLink":"[TASK] Disable test for unicode non breaking spaces substitution (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1907267672\" data-permission-text=\"Title is private\" data-url=\"https://github.com/TYPO3/html-sanitizer/issues/113\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/TYPO3/html-sanitizer/pull/113/hovercard\" href=\"https://github.com/TYPO3/html-sanitizer/pull/113\">#113</a>)"}},{"before":"090fb6db3630663668bef386c16783efd3cb70cd","after":"f27bfed266b099e7ea46e95f0ce7d4b069defe67","ref":"refs/heads/v1.5","pushedAt":"2023-07-25T08:47:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Drop replacement of unicode non breaking spaces\n\next-mbstring is not always available, and\nsymfony/polyfill-mbstring doesn't provide mb_split,\ntherefore this nice-to-have (which isn't required\nfrom a security perspective) is dropped for now.","shortMessageHtmlLink":"[TASK] Drop replacement of unicode non breaking spaces"}},{"before":"e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb","after":"a35f220b2336e3f040f91d3de23d19964833643f","ref":"refs/heads/main","pushedAt":"2023-07-25T08:47:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Drop replacement of unicode non breaking spaces\n\next-mbstring is not always available, and\nsymfony/polyfill-mbstring doesn't provide mb_split,\ntherefore this nice-to-have (which isn't required\nfrom a security perspective) is dropped for now.","shortMessageHtmlLink":"[TASK] Drop replacement of unicode non breaking spaces"}},{"before":"476383a82ca8db1982f1f7b04788b7bdeccdc28d","after":"e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb","ref":"refs/heads/main","pushedAt":"2023-07-25T07:14:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"Merge pull request from GHSA-59jf-3q9v-rh6g\n\n* [SECURITY] Properly encode noscript child nodes\n\nThe `<noscript>` element has a special behavior when\nbeing evaluated in browsers, which depends on whether\nscript-parsing is enabled or disabled.\n\nAs a consequence this change will\n\n* encode comment inner data, e.g. `<!-- <\"comment\"> -->`\n  as `<!-- &lt;&quot;comment&quot;&gt -->`\n* always encode tag attributes, e.g. `<p id=\"<value>\">`\n  as `<p id=\"&lt;value&gt;\">`\n* extend `Comment` and `CdataSection` to have a constructor\n  (which triggers encoding per default) and to implement the\n  `Behavior\\HandlerInterface`\n* add a new serializer option `encode_attributes`, which might\n  basically be extracted to `Masterminds\\HTML5`\n\n* [TASK] Ensure attribute serialization preserves values as is\n\nWe don't want so called double-encoding – which is a valid\nusecase when HTML describes how HTML is to be written – to\nbe automagically transformed to single encoded values,\nas otherwise a valid input like\n\n<a title=\"Insert &amp;amp; to write an &amp;\"></a>\n(Browser would show \"Insert &amp; to write an &\")\n\n…would be changed to:\n\n<a title=\"Insert &amp; to write an &amp;\"></a>\n(Browser would show \"Insert & to write an &\")\n\nAlso add tests for the attribute encoding we want:\n * Encode quotes, tags and stuff that might cause security issues\n * do not encode unnecessarily encode slashes or colons\n   (like htmlentitites would do)\n\n---------\n\nCo-authored-by: Benjamin Franzke <ben@bnf.dev>","shortMessageHtmlLink":"Merge pull request from <a title=\"GHSA-59jf-3q9v-rh6g\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-59jf-3q9v-rh6g/hovercard\" href=\"https://github.com/advisories/GHSA-59jf-3q9v-rh6g\">GHSA-59jf-3q9v-rh6g</a>"}},{"before":"385741b1f89a41e718748a773c85d0d3322bcefb","after":"090fb6db3630663668bef386c16783efd3cb70cd","ref":"refs/heads/v1.5","pushedAt":"2023-07-25T07:14:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"Merge pull request from GHSA-59jf-3q9v-rh6g\n\n* [SECURITY] Properly encode noscript child nodes\n\nThe `<noscript>` element has a special behavior when\nbeing evaluated in browsers, which depends on whether\nscript-parsing is enabled or disabled.\n\nAs a consequence this change will\n\n* encode comment inner data, e.g. `<!-- <\"comment\"> -->`\n  as `<!-- &lt;&quot;comment&quot;&gt -->`\n* always encode tag attributes, e.g. `<p id=\"<value>\">`\n  as `<p id=\"&lt;value&gt;\">`\n* extend `Comment` and `CdataSection` to have a constructor\n  (which triggers encoding per default) and to implement the\n  `Behavior\\HandlerInterface`\n* add a new serializer option `encode_attributes`, which might\n  basically be extracted to `Masterminds\\HTML5`\n\n* [TASK] Ensure attribute serialization preserves values as is\n\nWe don't want so called double-encoding – which is a valid\nusecase when HTML describes how HTML is to be written – to\nbe automagically transformed to single encoded values,\nas otherwise a valid input like\n\n<a title=\"Insert &amp;amp; to write an &amp;\"></a>\n(Browser would show \"Insert &amp; to write an &\")\n\n…would be changed to:\n\n<a title=\"Insert &amp; to write an &amp;\"></a>\n(Browser would show \"Insert & to write an &\")\n\nAlso add tests for the attribute encoding we want:\n * Encode quotes, tags and stuff that might cause security issues\n * do not encode unnecessarily encode slashes or colons\n   (like htmlentitites would do)\n\n---------\n\nCo-authored-by: Benjamin Franzke <ben@bnf.dev>","shortMessageHtmlLink":"Merge pull request from <a title=\"GHSA-59jf-3q9v-rh6g\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-59jf-3q9v-rh6g/hovercard\" href=\"https://github.com/advisories/GHSA-59jf-3q9v-rh6g\">GHSA-59jf-3q9v-rh6g</a>"}},{"before":"f8b9c466a08fe4b7bd32b4b8dbde5cf7fbfa9956","after":"476383a82ca8db1982f1f7b04788b7bdeccdc28d","ref":"refs/heads/main","pushedAt":"2023-05-15T13:57:23.717Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ohader","name":"Oliver Hader","path":"/ohader","primaryAvatarUrl":"https://github.com/avatars/u/402145?s=80&v=4"},"commit":{"message":"[TASK] Adjust Sanitizer PHPDoc tags (#108)","shortMessageHtmlLink":"[TASK] Adjust Sanitizer PHPDoc tags (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1638385618\" data-permission-text=\"Title is private\" data-url=\"https://github.com/TYPO3/html-sanitizer/issues/108\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/TYPO3/html-sanitizer/pull/108/hovercard\" href=\"https://github.com/TYPO3/html-sanitizer/pull/108\">#108</a>)"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEfgQRxgA","startCursor":null,"endCursor":null}},"title":"Activity · TYPO3/html-sanitizer"}