cpython/Misc/NEWS.d/next
Miss Islington (bot) 3937c78e36
[3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) (GH-133704)
According to the HTML5 spec, named character references in attribute values
should only be processed if they are not followed by an ASCII alphanumeric,
or an equals sign.
(cherry picked from commit 77b14a6d58)


https: //html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state

Co-authored-by: Sascha Ißbrücker <sascha.issbruecker@googlemail.com>
2025-05-09 09:43:21 +03:00
..
Build Python 3.14.0b1 2025-05-06 18:33:52 +03:00
C_API Python 3.14.0b1 2025-05-06 18:33:52 +03:00
Core_and_Builtins [3.14] gh-133541: Handle SyntaxError raised by the tokenizer on user input (GH-133606) (#133709) 2025-05-08 20:41:01 +00:00
Documentation Python 3.14.0b1 2025-05-06 18:33:52 +03:00
IDLE Python 3.14.0b1 2025-05-06 18:33:52 +03:00
Library [3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) (GH-133704) 2025-05-09 09:43:21 +03:00
macOS Python 3.14.0a7 2025-04-08 14:20:51 +03:00
Security Python 3.14.0b1 2025-05-06 18:33:52 +03:00
Tests [3.14] gh-133639: Fix test_auto_indent_default() doesn't run input_code (GH-133640) (#133646) 2025-05-08 08:50:57 +00:00
Tools-Demos Python 3.14.0b1 2025-05-06 18:33:52 +03:00
Windows gh-133626: Ensure the traditional Windows installer doesn't accidentally pick up site-packages (GH-133693) 2025-05-08 20:17:11 +00:00