codex-team / codex-team/editor.js

Security: HTML sanitization uses an unmaintained library (html-janitor)

Open
#2,583 0 comments 5 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
31.9k
Forks
2.2k
Avg merge
1d 1h
Merged PRs (30d)
1

Description

This issue is related to [this one](https://github.com/codex-team/editor.js/issues/2582), but it's not the same.

Editor.js Sanitization API for HTML is built on an unmaintained library (archived repo with last commit 6 years ago).

It would be wise from a security perspective to replace that library with an active project that can fix new security bugs and vulnerabilities.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.