Skip to content

Bump com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20261011.1 to 20261103.2 - #124

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.googlecode.owasp-java-html-sanitizer-owasp-java-html-sanitizer-20261103.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.googlecode.owasp-java-html-sanitizer-owasp-java-html-sanitizer-20261103.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20261011.1 to 20261103.2.

Release notes

Sourced from com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer's releases.

Release 20261103.2

Changelog

  • df36dc1 Release version 20261103.2 (GitHub Actions)
  • e2b175b Take the review: allow var() and shape() in presentation attributes (Jim Manico)
  • 02de2ca Take the review: vet presentation URLs as style does, allowlist tokens (Jim Manico)
  • 0d0ce85 Guard url() in SVG presentation attributes (GHSA-76cc-622x-jwm4) (Jim Manico)
  • f4d58ee Record GHSA-x759-2xw8-gp4m (Jim Manico)
  • 83d446d Prepare for next development version (GitHub Actions)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261103.1

Changelog

  • e921807 Release version 20261103.1 (GitHub Actions)
  • 3978c96 Take the review: mark UrlListAttributePolicy as TCB (Jim Manico)
  • 20c092f Take the review: keep URL lists that hold no URL (Jim Manico)
  • 96d6011 Guard imagesrcset and ping as URL attributes (GHSA-x759-2xw8-gp4m) (Jim Manico)
  • 1bbe13e Prepare for next development version (GitHub Actions)
  • d2c681a Record GHSA-ppfr-7xq6-p6c2 (Jim Manico)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261102.2

Changelog

  • 9a54168 Release version 20261102.2 (GitHub Actions)
  • f418f49 Take the review: test repeated allows and by, document CSS targets (Jim Manico)
  • 7de668d Take the review: animate only unconstrained global attributes (Jim Manico)
  • c3bc84e Keep SVG animations off guarded attributes (Jim Manico)
  • 033e431 Prepare for next development version (GitHub Actions)
  • 6a95f50 Record GHSA-643j-x48g-g86p (Jim Manico)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261102.1

Changelog

  • d16844f Release version 20261102.1 (GitHub Actions)
  • 02510e4 Credit the reporters of GHSA-643j-x48g-g86p (Jim Manico)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer](https://github.com/OWASP/java-html-sanitizer) from 20261011.1 to 20261103.2.
- [Release notes](https://github.com/OWASP/java-html-sanitizer/releases)
- [Commits](OWASP/java-html-sanitizer@release-20261011.1...release-20261103.2)

---
updated-dependencies:
- dependency-name: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer
  dependency-version: '20261103.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant