replace bleach with nh3 for HTML sanitization#14442

Open

valentijnscholten wants to merge 10 commits into

DefectDojo:devfrom

valentijnscholten:bleach-to-nh3

Commits on Mar 4, 2026

chore(deps): replace bleach with nh3 for HTML sanitization
valentijnscholten
committed
docs: add 2.57 upgrade note for bleach → nh3 migration
valentijnscholten
committed
fix(test): update announcement banner test for nh3 style stripping
valentijnscholten
committed

Commits on Mar 5, 2026

fix(test): handle nh3 rel=noopener and escape XSS in create_bleached_link
valentijnscholten
committed

Commits on Mar 6, 2026

fix: use escape() directly in create_bleached_link, drop nh3
valentijnscholten
committed

Commits on Mar 17, 2026

Merge branch 'dev' into bleach-to-nh3
valentijnscholten
authored