Bug 267880

Summary: [NEW PORT] www/p5-HTML-Defang: Cleans HTML of executable contents, and neutralises XSS attacks
Product: Ports & Packages Reporter: Martin Neubauer <m.ne>
Component: Individual Port(s)Assignee: Koichiro Iwao <meta>
Status: Closed FIXED    
Severity: Affects Only Me CC: meta
Priority: ---    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
patch adding www/p5-HTML-Defang none

Description Martin Neubauer 2022-11-20 16:32:13 UTC
Created attachment 238194 [details]
patch adding www/p5-HTML-Defang

Dependency needed for my ongoing work porting the Evergreen ILS
Comment 1 commit-hook freebsd_committer freebsd_triage 2022-11-29 09:21:48 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=3f81d34c3eec1933b7802b2c2f5ea8a1f9883494

commit 3f81d34c3eec1933b7802b2c2f5ea8a1f9883494
Author:     Martin Neubauer <m.ne@gmx.net>
AuthorDate: 2022-11-19 19:29:56 +0000
Commit:     Koichiro Iwao <meta@FreeBSD.org>
CommitDate: 2022-11-29 09:20:09 +0000

    www/p5-HTML-Defang: New port: HTML::Defang - Cleans HTML as well as CSS of scripting

    This module accepts an input HTML and/or CSS string and removes any
    executable code including scripting, embedded objects, applets, etc.,
    and neutralises any XSS attacks. A whitelist based approach is used
    which means only HTML known to be safe is allowed through.

    PR:             267880

 www/Makefile                       |  1 +
 www/p5-HTML-Defang/Makefile (new)  | 19 +++++++++++++++++++
 www/p5-HTML-Defang/distinfo (new)  |  3 +++
 www/p5-HTML-Defang/pkg-descr (new) |  4 ++++
 www/p5-HTML-Defang/pkg-plist (new) |  2 ++
 5 files changed, 29 insertions(+)
Comment 2 Koichiro Iwao freebsd_committer freebsd_triage 2022-11-29 09:22:13 UTC
Committed, thanks!