replace bleach with nh3 for HTML sanitization#14442

Open

valentijnscholten wants to merge 8 commits into

DefectDojo:devfrom

valentijnscholten:bleach-to-nh3

Commits on Jun 30, 2026

chore(deps): replace bleach with nh3 for HTML sanitization
valentijnscholten
committed
docs: add 2.57 upgrade note for bleach → nh3 migration
valentijnscholten
committed
fix(test): update announcement banner test for nh3 style stripping
valentijnscholten
committed
fix(test): handle nh3 rel=noopener and escape XSS in create_bleached_link
valentijnscholten
committed
fix: use escape() directly in create_bleached_link, drop nh3
valentijnscholten
committed
fix(bleach-to-nh3): replace bleach with nh3 in api_sonarqube importer

valentijnscholten
and
claude
committed
fix(bleach-to-nh3): migrate os_message.py and fix test assertions for nh3

valentijnscholten
and
claude
committed
fix(bleach-to-nh3): update os_message test assertion for nh3 link output

valentijnscholten
and
claude
committed