replace bleach with nh3 for HTML sanitization - #14442

Closed

valentijnscholten wants to merge 8 commits into

DefectDojo:devfrom

valentijnscholten:bleach-to-nh3

Commits on Jun 30, 2026

chore(deps): replace bleach with nh3 for HTML sanitization
valentijnscholten
committed
e7403c5
docs: add 2.57 upgrade note for bleach → nh3 migration
valentijnscholten
committed
2936c9c
fix(test): update announcement banner test for nh3 style stripping
valentijnscholten
committed
3671516
fix(test): handle nh3 rel=noopener and escape XSS in create_bleached_link
valentijnscholten
committed
2a73bf0
fix: use escape() directly in create_bleached_link, drop nh3
valentijnscholten
committed
ec2a0f6
fix(bleach-to-nh3): replace bleach with nh3 in api_sonarqube importer

valentijnscholten
and
claude
committed
f416d7f
fix(bleach-to-nh3): migrate os_message.py and fix test assertions for nh3

valentijnscholten
and
claude
committed
4f8197a
fix(bleach-to-nh3): update os_message test assertion for nh3 link output

valentijnscholten
and
claude
committed
55d3bee