GHSA-3pqg-4rqg-pg9g
Cross-site Scripting in OWASP AntiSamy
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.owasp.antisamy:antisamy | < 1.6.6 | 1.6.6 |
Details
As written in the advisory (Markdown source, shown as plain text).
OWASP AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.
References
External links from the advisory. They lead to third-party sites.