Branch :
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
| 149c04c0 | 2025-08-02 14:59:02 | html: Escape < and > when serializing attributes This reverts the change in cdaf657f. Coincidentally, the HTML spec just changed to mandate the old escaping behavior: https://github.com/whatwg/html/issues/6235 Fixes #957. | ||
| 0c948334 | 2025-07-10 11:23:44 | html: Add newline to error message | ||
| bc0bb67b | 2025-07-10 11:20:22 | html: Don't abort on encoding errors Always enable recovery mode when parsing HTML, so we don't raise fatal errors. Regressed with 462bf0b7. Fixes #947. | ||
| 71e1e8af | 2025-07-04 14:28:26 | schematron: Fix memory safety issues in xmlSchematronReportOutput Fix use-after-free (CVE-2025-49794) and type confusion (CVE-2025-49796) in xmlSchematronReportOutput. Fixes #931. Fixes #933. | ||
| 24d7e159 | 2025-07-04 12:19:20 | schematron: Complete fix for CVE-2025-49795 - Fix memory leaks - Fix tests | ||
| 499bcb78 | 2025-06-21 12:11:30 | Schematron: Fix null pointer dereference leading to DoS (CVE-2025-49795) Fixes #932 | ||
| 069bcda1 | 2025-06-20 23:05:00 | Fix potential buffer overflows of interactive shell CVE-2025-6170 Fixes #941 | ||
| 9760a14f | 2025-06-30 13:47:33 | relaxng: In the simplification step also unlink notAllowed refs from choice This fixes false reports of non allowed content compared to notAllowed as tag within the choice tag. | ||
| ad0f5d27 | 2025-06-24 13:02:13 | tree: Fix xmlGetNodePath - Fix quadratic behavior - Don't truncate names Fixes #715. | ||
| ab06bfa1 | 2025-05-26 15:03:07 | parser: Fix error return in xmlParseElementContentDecl Avoid internal error later in xmlValidBuildAContentModel after 2a60ca06c. Also avoids some unnecessary error messages. |