[
https://issues.apache.org/jira/browse/JSPWIKI-1206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18138322#comment-18138322
]
ASF subversion and git services commented on JSPWIKI-1206:
----------------------------------------------------------
Commit 7e51af7d5f808b80b54aa31b3937c58ef4eb23f3 in jspwiki's branch
refs/heads/master from Arturo Bernal
[ https://gitbox.apache.org/repos/asf?p=jspwiki.git;h=7e51af7d5 ]
JSPWIKI-1206 Update htmlunit-neko to 5.7.0
5.7.0 limits the input the parser accepts, which guards against denial of
service with crafted HTML, and drops the first line break after <pre>, as
the HTML specification says. The tests of <pre> expect one line break less.
> Migrate from neko-html to htmlunit-neko parser
> ----------------------------------------------
>
> Key: JSPWIKI-1206
> URL: https://issues.apache.org/jira/browse/JSPWIKI-1206
> Project: JSPWiki
> Issue Type: Improvement
> Reporter: Ronald Brill
> Priority: Major
> Labels: pull-request-available
>
> htmlunit-neko (https://github.com/HtmlUnit/htmlunit-neko) is a fork of the
> original NekoHTML parser that is actively maintained by the HtmlUnit team.
> This parser has evolved significantly since the original project was
> abandoned and offers substantial improvements for modern HTML processing
> needs like
> * many parser improvements
> * performance improvements
> * xerces dependency removed
> * bunch of fixes for html parser border cases
> * regular releases
> * ....
> Outside of the package name changes, the lib should be compatible
> ([https://github.com/HtmlUnit/htmlunit-neko?tab=readme-ov-file#porting-from-3x-to-4x)]
> If you like to do this and face any issue, please reach out to me and a will
> try to help.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
