symfony/html-sanitizer
php · symfony/html-sanitizerHeads-up
symfony/html-sanitizer: Expanded URL sanitization for additional attributes and meta refresh
UrlAttributeSanitizer now sanitizes 'data', 'codebase', 'archive', 'longdesc' attributes.
16 Jun 2026 · schedule it
php · symfony/html-sanitizerHeads-up
symfony/html-sanitizer UrlSanitizer::parse() denies BiDi marks and Unicode whitespace
UrlSanitizer::parse() now denies BiDi formatting marks, Unicode whitespace, and zero-width no-break space in both raw input and pe
16 Jun 2026 · schedule it