Changelog
### 4.6.3
```
==================
Bugs fixed
----------
* A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung,
which allowed JavaScript to pass through. The cleaner now removes the HTML5
``formaction`` attribute.
```
Links
- PyPI: https://pypi.org/project/lxml
- Changelog: https://pyup.io/changelogs/lxml/
- Homepage: https://lxml.de/
Coverage remained the same at 80.274% when pulling 644af8727081e58fb7392e93f98a93332133a92e on pyup-update-lxml-4.6.2-to-4.6.3 into 2287b03f0ea5570790ec783fef27d085675cabc2 on master.
Coverage remained the same at 80.274% when pulling 644af8727081e58fb7392e93f98a93332133a92e on pyup-update-lxml-4.6.2-to-4.6.3 into 2287b03f0ea5570790ec783fef27d085675cabc2 on master.
This PR updates lxml from 4.6.2 to 4.6.3.
Changelog
### 4.6.3 ``` ================== Bugs fixed ---------- * A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung, which allowed JavaScript to pass through. The cleaner now removes the HTML5 ``formaction`` attribute. ```Links
- PyPI: https://pypi.org/project/lxml - Changelog: https://pyup.io/changelogs/lxml/ - Homepage: https://lxml.de/