Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
trentm
python-markdown2
Repository navigation
Code
Issues
83
(83)
Pull requests
20
(20)
Actions
Projects
Wiki
Security and quality
Insights
More
items
XSS fixes in links, images, and more
- #705
#705
Merged
nicholasserra
merged 15 commits into
trentm:master
trentm/python-markdown2:master
from
Crozzers:further-xss-fixes
Crozzers/python-markdown2:further-xss-fixes
Copy head branch name to clipboard
Aug 18, 2026
Conversation
Commits
15
(15)
Checks
Files changed
Merged
XSS fixes in links, images, and more
#705
nicholasserra
merged 15 commits into
trentm:master
trentm/python-markdown2:master
from
Crozzers:further-xss-fixes
Crozzers/python-markdown2:further-xss-fixes
Copy head branch name to clipboard
Commits
Commits on May 14, 2026
Fix XSS fromn HTML encoded colons in hrefs
Crozzers
committed
3b96ec1
View commit details
Copy full SHA for 3b96ec1
Browse repository at this point
Fix XSS from making javascript: hrefs look like domains with ports
Crozzers
committed
a11ce82
View commit details
Copy full SHA for a11ce82
Browse repository at this point
Fix onerror XSS in image title attr
Crozzers
committed
82b4482
View commit details
Copy full SHA for 82b4482
Browse repository at this point
Commits on May 23, 2026
Fix incomplete recursive unhashing of spans
Show description for 456f8a9
Crozzers
committed
456f8a9
View commit details
Copy full SHA for 456f8a9
Browse repository at this point
Update github actions versions
Crozzers
committed
c173c12
View commit details
Copy full SHA for c173c12
Browse repository at this point
Commits on May 24, 2026
Fix smuggling XSS into link def URLs
Crozzers
committed
b0dd0b3
View commit details
Copy full SHA for b0dd0b3
Browse repository at this point
Commits on Jun 13, 2026
Fix HTML block hashing messing up if open/close tags not at start of line
Crozzers
committed
c7a75f6
View commit details
Copy full SHA for c7a75f6
Browse repository at this point
Commits on Jun 14, 2026
Fix links being processed within autolink syntax
Crozzers
committed
e7b0ba1
View commit details
Copy full SHA for e7b0ba1
Browse repository at this point
Commits on Jun 20, 2026
Fix tag balance checkers not accounting for void tags
Crozzers
committed
21eb34b
View commit details
Copy full SHA for 21eb34b
Browse repository at this point
Commits on Jun 26, 2026
Loosen link-within-autolink check for if link starts OR ends inside autolink
Crozzers
committed
2f0cf2c
View commit details
Copy full SHA for 2f0cf2c
Browse repository at this point
Commits on Aug 9, 2026
Fix orphaned closing tags breaking html block hashing
Crozzers
committed
0e3527b
View commit details
Copy full SHA for 0e3527b
Browse repository at this point
Commits on Aug 18, 2026
Merge branch 'master' into further-xss-fixes
Crozzers
committed
c06b073
View commit details
Copy full SHA for c06b073
Browse repository at this point
Fix SVGs smuggled in autolinks
Crozzers
committed
6e81042
View commit details
Copy full SHA for 6e81042
Browse repository at this point
Update changelog
Crozzers
committed
1b5d132
View commit details
Copy full SHA for 1b5d132
Browse repository at this point
Fix test suite for pygments 2.21
Crozzers
committed
c06f274
View commit details
Copy full SHA for c06f274
Browse repository at this point
You can’t perform that action at this time.
