New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security: HTML sanitization uses an unmaintained library (html-janitor) #2583

Open

collimarco opened this issue Jan 6, 2024 · 0 comments

collimarco commented Jan 6, 2024

This issue is related to this one, but it's not the same.

Editor.js Sanitization API for HTML is built on an unmaintained library (archived repo with last commit 6 years ago).

It would be wise from a security perspective to replace that library with an active project that can fix new security bugs and vulnerabilities.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment