pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/textproc/py-lxml-html-clean

Module Name:    pkgsrc
Committed By:   adam
Date:           Sun Mar  1 08:29:31 UTC 2026

Modified Files:
        pkgsrc/textproc/py-lxml-html-clean: Makefile distinfo

Log Message:
py-lxml-html-clean: updated to 0.4.4

0.4.4 (2026-02-26)

Bugs fixed

* Fixed a bug where Unicode escapes in CSS were not properly decoded
  before security checks. This prevents attackers from bypassing filters
  using escape sequences.
* Fixed a security issue where ``<base>`` tags could be used for URL
  hijacking attacks. The ``<base>`` tag is now automatically removed
  whenever the ``<head>`` tag is removed (via ``page_structure=True``
  or manual configuration), as ``<base>`` must be inside ``<head>``
  according to HTML specifications.


To generate a diff of this commit:
cvs rdiff -u -r1.12 -r1.13 pkgsrc/textproc/py-lxml-html-clean/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/textproc/py-lxml-html-clean/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


Modified files:

Index: pkgsrc/textproc/py-lxml-html-clean/Makefile
diff -u pkgsrc/textproc/py-lxml-html-clean/Makefile:1.12 pkgsrc/textproc/py-lxml-html-clean/Makefile:1.13
--- pkgsrc/textproc/py-lxml-html-clean/Makefile:1.12    Thu Oct  9 07:58:00 2025
+++ pkgsrc/textproc/py-lxml-html-clean/Makefile Sun Mar  1 08:29:31 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.12 2025/10/09 07:58:00 wiz Exp $
+# $NetBSD: Makefile,v 1.13 2026/03/01 08:29:31 adam Exp $
 
-DISTNAME=      lxml_html_clean-0.4.3
+DISTNAME=      lxml_html_clean-0.4.4
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/_/-/g}
 CATEGORIES=    textproc python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=l/lxml-html-clean/}

Index: pkgsrc/textproc/py-lxml-html-clean/distinfo
diff -u pkgsrc/textproc/py-lxml-html-clean/distinfo:1.9 pkgsrc/textproc/py-lxml-html-clean/distinfo:1.10
--- pkgsrc/textproc/py-lxml-html-clean/distinfo:1.9     Fri Oct  3 05:45:35 2025
+++ pkgsrc/textproc/py-lxml-html-clean/distinfo Sun Mar  1 08:29:31 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2025/10/03 05:45:35 adam Exp $
+$NetBSD: distinfo,v 1.10 2026/03/01 08:29:31 adam Exp $
 
-BLAKE2s (lxml_html_clean-0.4.3.tar.gz) = eca49f34a82d5231651684e4c5b78f1cf8c1d9c3f32ebde9a00fe8e90b6f98a3
-SHA512 (lxml_html_clean-0.4.3.tar.gz) = 677037adeaa2649c5209015498672e11b131fc14a799b6fcda8eec9552fae626942f0905f7bc6e29f03075f48e0b5915f214c4afe8b22d72d035907afb9a099e
-Size (lxml_html_clean-0.4.3.tar.gz) = 21498 bytes
+BLAKE2s (lxml_html_clean-0.4.4.tar.gz) = ed5c41626fc4e7afb0ff885af43271dcb4d6635b52b6ba5d92c82bb8bcac0db5
+SHA512 (lxml_html_clean-0.4.4.tar.gz) = 3d287269be30bf585aa6e02990ecb2c4cc4169bac7451ce05d24b8e08232760ec5c220aec435f8317624a779c203a1608fa2bbcdb5174ee454fba6a2d4d0a9fe
+Size (lxml_html_clean-0.4.4.tar.gz) = 23899 bytes
Home | Main Index | Thread Index | Old Index