Skip to content

[3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) #133704

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 9, 2025

Conversation

miss-islington
Copy link
Contributor

@miss-islington miss-islington commented May 8, 2025

According to the HTML5 spec, named character references in attribute values
should only be processed if they are not followed by an ASCII alphanumeric,
or an equals sign.
(cherry picked from commit 77b14a6)

Co-authored-by: Sascha Ißbrücker [email protected]
https: //html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state

…er entities in attribute values (pythonGH-95215)

According to the HTML5 spec, named character references in attribute values
should only be processed if they are not followed by an ASCII alphanumeric,
or an equals sign.
(cherry picked from commit 77b14a6)

Co-authored-by: Sascha Ißbrücker <[email protected]>
https: //html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state
@python-cla-bot
Copy link

python-cla-bot bot commented May 8, 2025

All commit authors signed the Contributor License Agreement.

CLA signed

@hugovk
Copy link
Member

hugovk commented May 8, 2025

@sissbruecker Please can you also sign the CLA with the email shown above? We need an entry for the ones used in commits and GitHub accounts, if they're different. Thank you!

@sissbruecker
Copy link
Contributor

@hugovk Sure, done

@serhiy-storchaka serhiy-storchaka merged commit 3937c78 into python:3.14 May 9, 2025
43 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants