Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

russross/blackfriday

              master @ e96880f
            

Fixes

CVEs

HIGH

Peak severity

60.0%

Coverage

Highlights

Cross-Site Scripting (XSS): 5 prior fixes. Scrutinize any change in this area.

sanitize.go: most-fixed (4 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting (XSS): The tokenizer-based HTML sanitization logic is highly sensitive to state-switching bypasses, such as raw-text transitions (e.g., script tags) or improperly handled self-closing elements which can bypass the tag whitelist.

Cross-Site Scripting (XSS): Naive block or inline filtering strategies (such as skipping script tags inline) historically failed to prevent markup injection, necessitating centralized sanitization of the final output stream.