Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
trentm
python-markdown2
Repository navigation
Code
Issues
79
(79)
Pull requests
12
(12)
Actions
Projects
Wiki
Security and quality
Insights
More
items
XSS fixes in links, images, and more
- #705
#705
Merged
nicholasserra
merged 15 commits into
trentm:master
trentm/python-markdown2:master
from
Crozzers:further-xss-fixes
Crozzers/python-markdown2:further-xss-fixes
Copy head branch name to clipboard
Aug 18, 2026
Conversation
Commits
15
(15)
Checks
Files changed
Merged
XSS fixes in links, images, and more
#705
nicholasserra
merged 15 commits into
trentm:master
trentm/python-markdown2:master
from
Crozzers:further-xss-fixes
Crozzers/python-markdown2:further-xss-fixes
Copy head branch name to clipboard
Commits
Commits on May 14, 2026
Fix XSS fromn HTML encoded colons in hrefs
Crozzers
committed
3b96ec1
View commit details
Copy full SHA for 3b96ec1
Browse repository at this point
Fix XSS from making javascript: hrefs look like domains with ports
Crozzers
committed
a11ce82
View commit details
Copy full SHA for a11ce82
Browse repository at this point
Fix onerror XSS in image title attr
Crozzers
committed
82b4482
View commit details
Copy full SHA for 82b4482
Browse repository at this point
Commits on May 23, 2026
Fix incomplete recursive unhashing of spans
Show description for 456f8a9
Crozzers
committed
456f8a9
View commit details
Copy full SHA for 456f8a9
Browse repository at this point
Update github actions versions
Crozzers
committed
c173c12
View commit details
Copy full SHA for c173c12
Browse repository at this point
Commits on May 24, 2026
Fix smuggling XSS into link def URLs
Crozzers
committed
b0dd0b3
View commit details
Copy full SHA for b0dd0b3
Browse repository at this point
Commits on Jun 13, 2026
Fix HTML block hashing messing up if open/close tags not at start of line
Crozzers
committed
c7a75f6
View commit details
Copy full SHA for c7a75f6
Browse repository at this point
Commits on Jun 14, 2026
Fix links being processed within autolink syntax
Crozzers
committed
e7b0ba1
View commit details
Copy full SHA for e7b0ba1
Browse repository at this point
Commits on Jun 20, 2026
Fix tag balance checkers not accounting for void tags
Crozzers
committed
21eb34b
View commit details
Copy full SHA for 21eb34b
Browse repository at this point
Commits on Jun 26, 2026
Loosen link-within-autolink check for if link starts OR ends inside autolink
Crozzers
committed
2f0cf2c
View commit details
Copy full SHA for 2f0cf2c
Browse repository at this point
Commits on Aug 9, 2026
Fix orphaned closing tags breaking html block hashing
Crozzers
committed
0e3527b
View commit details
Copy full SHA for 0e3527b
Browse repository at this point
Commits on Aug 18, 2026
Merge branch 'master' into further-xss-fixes
Crozzers
committed
c06b073
View commit details
Copy full SHA for c06b073
Browse repository at this point
Fix SVGs smuggled in autolinks
Crozzers
committed
6e81042
View commit details
Copy full SHA for 6e81042
Browse repository at this point
Update changelog
Crozzers
committed
1b5d132
View commit details
Copy full SHA for 1b5d132
Browse repository at this point
Fix test suite for pygments 2.21
Crozzers
committed
c06f274
View commit details
Copy full SHA for c06f274
Browse repository at this point
You can’t perform that action at this time.
