Ammonia HTML Sanitizer – Ammonia Cross-Site Script Vulnerability

Ammonia HTML Sanitizer versions prior to 3.3.2, 4.0.2, and 4.1.3 have a cross-site scripting vulnerability. This vulnerability stems from improper implementation of the encoding-related MathML integration point in annotation-xml. After the attribute filtering removes the encoding, inconsistent...