Lucene search
+L

331 matches found

Github Security Blog
Github Security Blog
•added 2026/09/30 3:36 p.m.•3 views

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

Summary The DisallowedRawHtml extension does not escape a disallowed tag when the tag name is the last thing in the raw HTML. A Markdown line containing just /i The trailing character class requires one character after the tag name. The block parser does not: RegexHelper::PARTIALHTMLBLOCKOPEN...

5.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder