Title: gh-69426: only unescape properly terminated character entities in attribute values by sissbruecker · Pull Request #95215 · python/cpython · GitHub
Open Graph Title: gh-69426: only unescape properly terminated character entities in attribute values by sissbruecker · Pull Request #95215 · python/cpython
X Title: gh-69426: only unescape properly terminated character entities in attribute values by sissbruecker · Pull Request #95215 · python/cpython
Description: Fixes HTMLParser to only unescape named character references in attribute values if they are properly terminated. According to the HTML5 spec, named character references in attribute values should only be processed if they are not followed by an ASCII alphanumeric, or an equals sign. So the following references should be unescaped: ¢ ¢ foo ¢-foo While the following should not: ¢er ¢= This change adds an attribute value specific character unescaping logic that should cover these cases. Fixes: #69426 Issue: gh-69426
Open Graph Description: Fixes HTMLParser to only unescape named character references in attribute values if they are properly terminated. According to the HTML5 spec, named character references in attribute values should ...
X Description: Fixes HTMLParser to only unescape named character references in attribute values if they are properly terminated. According to the HTML5 spec, named character references in attribute values should ...
Opengraph URL: https://github.com/python/cpython/pull/95215
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:f1211082-3e93-9ead-bee9-a395f37260d9 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | EA58:3F7705:2083F0E:2C432FC:6A5412C4 |
| html-safe-nonce | e5f224a58f3ddb9a36d737d5a246a2b93f873cf7e21a1bcd40436550fcbf3fa1 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFQTU4OjNGNzcwNToyMDgzRjBFOjJDNDMyRkM6NkE1NDEyQzQiLCJ2aXNpdG9yX2lkIjoiODA5ODYzNjA5Nzk5ODAzMzYwNCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 552907bd84ae0a447e1f6894612016cab08df8f6ff7a291b5abdb1921fd523fd |
| hovercard-subject-tag | pull_request:1006607452 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/python/cpython/pull/95215/files |
| twitter:image | https://avatars.githubusercontent.com/u/357820?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/357820?s=400&v=4 |
| og:image:alt | Fixes HTMLParser to only unescape named character references in attribute values if they are properly terminated. According to the HTML5 spec, named character references in attribute values should ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | b9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 07a982c1d40157c619b364352b704c3ce66bb332 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width