`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes
High severity
GitHub Reviewed
Published
Jun 1, 2026
in
fedora-python/lxml_html_clean
•
Updated Jul 8, 2026
Give feedback on Dependabot alerts