Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gjtorikian/html-pipeline

              main @ c99d76d
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Cross-Site Scripting (XSS): 3 prior fixes. Scrutinize any change in this area.

lib/html_pipeline.rb: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting (XSS): A structural flaw allowed the complete bypass of HTML sanitization when a pipeline was configured without a conversion filter, leading to un-sanitized output and direct XSS vulnerabilities.

Cross-Site Scripting (XSS): Processing node filters before the HTML is sanitized introduced structural XSS risks and bypass opportunities, requiring enforcement of sanitization prior to running custom node filters.

Reflected XSS: Overly permissive default element and attribute allowlists (e.g., action, color, cellpadding, cellspacing) in Selma::Sanitizer config allowed injection of risky attributes.