Re: [LFS Trac] #5776: python3-3.13.6

"LFS Trac" ([email protected] via lfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.book
Message-ID <[email protected]>
#5776: python3-3.13.6
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  12.4
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+-----------------------
Comment (by Douglas R. Reno):

 From
 https://docs.python.org/release/3.13.6/whatsnew/changelog.html#python-3-13-6
 :

 {{{
 Security

 gh-135661: Fix parsing start and end tags in html.parser.HTMLParser
 according to the
 HTML5 standard.

         Whitespaces no longer accepted between </ and the tag name. E.g.
 </ script> does
 not end the script section.

         Vertical tabulation (\v) and non-ASCII whitespaces no longer
 recognized as
 whitespaces. The only whitespaces are \t\n\r\f and space.

         Null character (U+0000) no longer ends the tag name.

         Attributes and slashes after the tag name in end tags are now
 ignored, instead
 of terminating after the first > in quoted attribute value. E.g.
 </script/foo=">"/>.

         Multiple slashes and whitespaces between the last attribute and
 closing > are
 now ignored in both start and end tags. E.g. <a foo=bar/ //>.

         Multiple = between attribute name and value are no longer
 collapsed. E.g. <a
 foo==bar> produces attribute “foo” with value “=bar”.

 gh-102555: Fix comment parsing in html.parser.HTMLParser according to the
 HTML5
 standard. --!> now ends the comment. -- > no longer ends the comment.
 Support abnormally
 ended empty comments <--> and <--->.

 gh-135462: Fix quadratic complexity in processing specially crafted input
 in
 html.parser.HTMLParser. End-of-file errors are now handled according to
 the HTML5 specs
 – comments and declarations are automatically closed, tags are ignored.

 gh-118350: Fix support of escapable raw text mode (elements “textarea” and
 “title”) in
 html.parser.HTMLParser.
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5776#comment:3>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.