paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-10-23 04:52:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

CVE-2025-52559: Generate HTML for digest message sender safely.

Browse Source 
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2025-06-24 15:51:09 -07:00
committed by Tim Abbott
parent c33b6cae38
commit a274170293
2 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pyproject.toml
View File

@@ -519,7 +519,7 @@ ignore = [
]
[tool.ruff.lint.flake8-bandit]
allowed-markup-calls = ["lxml.html.tostring"]
allowed-markup-calls = ["bs4.BeautifulSoup.decode", "lxml.html.tostring"]
[tool.ruff.lint.flake8-gettext]
extend-function-names = ["gettext_lazy"]