fix(security): Replace custom HTML escape with stdlib html.escape()#61
fix(security): Replace custom HTML escape with stdlib html.escape()#61universe7creator wants to merge 1 commit intodocksec-security:mainfrom
Conversation
- Use Python's html.escape() instead of custom escape table - More secure and battle-tested implementation - Reduces code complexity (~30 lines saved) Fixes docksec-security#48
|
Hi @advaitpatel! Quick check-in on PRs #61 and #62 - both are simple security fixes, conflict-free, and ready to merge whenever you have a moment. No rush, just wanted to put them back on your radar. Thanks for all your work on this project! |
|
Hi @advaitpatel! Quick check-in on this PR - its a simple security fix, conflict-free, and ready to merge. No rush, just wanted to put it back on your radar. Thanks for maintaining this project! |
|
Hi @advaitpatel, Following up on this PR. It's mergeable and ready. Please let me know if anything else is needed! Thanks! |
|
Hi @advaitpatel! Hope you are doing well. Quick follow-up on PRs #61 and #62 - both are simple security fixes, conflict-free, and ready to merge whenever you have a moment. No rush at all - just wanted to make sure they did not get lost in the queue. Thanks for maintaining this project! |
|
Hi @advaitpatel, Just checking if there's anything needed from my side to help get this merged? Happy to make any changes if required. Thanks! |
|
@advaitpatel Friendly ping! This PR improves security by using stdlib html.escape(). Ready to merge if no changes needed! |
|
@advaitpatel Friendly ping! This security fix using stdlib html.escape is ready. Let me know if any changes needed for merge! |
1 participant
Summary
Replaces custom HTML escape table with Python stdlib html.escape() for improved security.
Changes
Security
Stdlib html.escape() is battle-tested and more secure.
Fixes #48