Bug 267880 - [NEW PORT] www/p5-HTML-Defang: Cleans HTML of executable contents, and neutralises XSS attacks
Summary: [NEW PORT] www/p5-HTML-Defang: Cleans HTML of executable contents, and neutra...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Koichiro Iwao
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-11-20 16:32 UTC by Martin Neubauer
Modified: 2022-11-29 09:22 UTC (History)
1 user (show)

See Also:


Attachments
patch adding www/p5-HTML-Defang (2.64 KB, patch)
2022-11-20 16:32 UTC, Martin Neubauer
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Neubauer 2022-11-20 16:32:13 UTC
Created attachment 238194 [details]
patch adding www/p5-HTML-Defang

Dependency needed for my ongoing work porting the Evergreen ILS
Comment 1 commit-hook freebsd_committer freebsd_triage 2022-11-29 09:21:48 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=3f81d34c3eec1933b7802b2c2f5ea8a1f9883494

commit 3f81d34c3eec1933b7802b2c2f5ea8a1f9883494
Author:     Martin Neubauer <m.ne@gmx.net>
AuthorDate: 2022-11-19 19:29:56 +0000
Commit:     Koichiro Iwao <meta@FreeBSD.org>
CommitDate: 2022-11-29 09:20:09 +0000

    www/p5-HTML-Defang: New port: HTML::Defang - Cleans HTML as well as CSS of scripting

    This module accepts an input HTML and/or CSS string and removes any
    executable code including scripting, embedded objects, applets, etc.,
    and neutralises any XSS attacks. A whitelist based approach is used
    which means only HTML known to be safe is allowed through.

    PR:             267880

 www/Makefile                       |  1 +
 www/p5-HTML-Defang/Makefile (new)  | 19 +++++++++++++++++++
 www/p5-HTML-Defang/distinfo (new)  |  3 +++
 www/p5-HTML-Defang/pkg-descr (new) |  4 ++++
 www/p5-HTML-Defang/pkg-plist (new) |  2 ++
 5 files changed, 29 insertions(+)
Comment 2 Koichiro Iwao freebsd_committer freebsd_triage 2022-11-29 09:22:13 UTC
Committed, thanks!