We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4ea768d commit d2d9ac3Copy full SHA for d2d9ac3
CHANGES
@@ -1,6 +1,10 @@
1
jsoup changelog
2
3
-Release 1.15.3 [PENDING]
+Release 1.15.3 [2022-Aug-24]
4
+ * Security: fixed an issue where the jsoup cleaner may incorrectly sanitize crafted XSS attempts if
5
+ SafeList.preserveRelativeLinks is enabled.
6
+ <https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369>
7
+
8
* Improvement: the Cleaner will preserve the source position of cleaned elements, if source tracking is enabled in the
9
original parse.
10
0 commit comments