commit b0729afc09d8a57a9c0b83847575162bb445eb6e
author Dave Brondsema <dbrondsema@slashdotmedia.com> Thu Jul 03 17:59:41 2014 +0000
committer Dave Brondsema <dbrondsema@slashdotmedia.com> Thu Jul 03 20:54:46 2014 +0000
tree 9fad4d56257e7482ae387828bbb7090ff7c842c8
parent 18cff87f4bcaf8c5514a7638c9d470df62268f46

[#7528] change html sanitization library to fix XSS issue

Feedparser library hasn't been updated in years.  html5lib
has the same sanitizer with updates, including fixes for this parsing
issue.  It also has other behavioral changes including:

* trailing slashes removed from URLs (weird, and not ideal)
* quotes around attributes like href removed when not necessary
* changed order of attributes
* no closing </p>; <br> instead of <br />; etc
* disallowed tags are escaped instead of removed
* comments are removed instead of left in