Skip to content

Commit 0d88dd8

Browse files
Greg Gutheg-k
Greg Guthe
authored andcommitted
Update for v3.1.1 release
1 parent 996cde7 commit 0d88dd8

File tree

2 files changed

+38
-3
lines changed

2 files changed

+38
-3
lines changed

CHANGES

Lines changed: 36 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,41 @@
11
Bleach changes
22
==============
33

4+
Version 3.1.1 (February 13th, 2020)
5+
-----------------------------------
6+
7+
**Security fixes**
8+
9+
* ``bleach.clean`` behavior parsing ``noscript`` tags did not match
10+
browser behavior.
11+
12+
Calls to ``bleach.clean`` allowing ``noscript`` and one or more of
13+
the raw text tags (``title``, ``textarea``, ``script``, ``style``,
14+
``noembed``, ``noframes``, ``iframe``, and ``xmp``) were vulnerable
15+
to a mutation XSS.
16+
17+
This security issue was confirmed in Bleach versions v2.1.4, v3.0.2,
18+
and v3.1.0. Earlier versions are probably affected too.
19+
20+
Anyone using Bleach <=v3.1.0 is highly encouraged to upgrade.
21+
22+
https://bugzilla.mozilla.org/show_bug.cgi?id=1615315
23+
24+
**Backwards incompatible changes**
25+
26+
None
27+
28+
**Features**
29+
30+
None
31+
32+
**Bug fixes**
33+
34+
None
35+
36+
Bleach changes
37+
==============
38+
439
Version 3.1.0 (January 9th, 2019)
540
---------------------------------
641

@@ -76,7 +111,7 @@ None
76111

77112
* Fix ``list`` object has no attribute ``lower`` in ``clean``. (#398)
78113
* Fix ``abbr`` getting escaped in ``linkify``. (#400)
79-
114+
80115

81116
Version 3.0.0 (October 3rd, 2018)
82117
---------------------------------

bleach/__init__.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,9 @@
1818

1919

2020
# yyyymmdd
21-
__releasedate__ = '20190109'
21+
__releasedate__ = '20200213'
2222
# x.y.z or x.y.z.dev0 -- semver
23-
__version__ = '3.1.0'
23+
__version__ = '3.1.1'
2424
VERSION = parse_version(__version__)
2525

2626

0 commit comments

Comments
 (0)