NotificationsYou must be signed in to change notification settings
Fork32.4k
Star67.9k

[3.11] gh-102555: Fix comment parsing in HTMLParser according to the HTML5 standard (GH-135664)#136274

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

ambv merged 1 commit intopython:3.11frommiss-islington:backport-8ac7613-3.11

Jul 12, 2025

Merged

[3.11] gh-102555: Fix comment parsing in HTMLParser according to the HTML5 standard (GH-135664)#136274

ambv merged 1 commit intopython:3.11frommiss-islington:backport-8ac7613-3.11

Jul 12, 2025

Conversation

Copy link

Contributor

miss-islington commentedJul 4, 2025•
edited by bedevere-appbot
Loading

"--!>" now ends the comment.
"-- >" no longer ends the comment.
Support abnormally ended empty comments "<-->" and "<--->".

(cherry picked from commit8ac7613)

Co-authored-by: Serhiy Storchakastorchaka@gmail.com
Co-author: Kerim Kabirovthe.privat33r+gh@pm.me
Co-authored-by: Ezio Melottiezio.melotti@gmail.com

Issue:XSS in html.parser library #102555

pythongh-102555: Fix comment parsing in HTMLParser according to the H…

f46c48c

…TML5 standard (pythonGH-135664)* "--!>" now ends the comment.* "-- >" no longer ends the comment.* Support abnormally ended empty comments "<-->" and "<--->".---------(cherry picked from commit8ac7613)Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>Co-author: Kerim Kabirov <the.privat33r+gh@pm.me>Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>