Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace deprecated bleach package #33209

Open
jmbowman opened this issue Sep 8, 2023 · 0 comments · May be fixed by #34811
Open

Replace deprecated bleach package #33209

jmbowman opened this issue Sep 8, 2023 · 0 comments · May be fixed by #34811
Assignees

Comments

@jmbowman
Copy link
Contributor

jmbowman commented Sep 8, 2023

The bleach package was deprecated as of 2023-01-23 because the underlying html5lib package is essentially no longer being developed: mozilla/bleach#698 . The best suggested replacement so far is https://github.com/messense/nh3 , a Python wrapper for https://github.com/rust-ammonia/ammonia (a Rust library which was in turn inspired by bleach); one recent example of a package migrating to it is pypa/readme_renderer#295 .

We should determine if nh3 is a suitable replacement for bleach in edx-platform, and if so attempt the replacement.

@irtazaakram irtazaakram self-assigned this Dec 13, 2023
@irtazaakram irtazaakram removed their assignment Apr 30, 2024
@irtazaakram irtazaakram linked a pull request May 16, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: 👀 In review
Development

Successfully merging a pull request may close this issue.

2 participants