gjtorikian / html-pipeline

HTML processing filters and utilities
MIT License
2.27k stars 382 forks source link

Freeze all elements in HTML::Pipeline::SanitizationFilter #299

Closed stanhu closed 6 years ago

stanhu commented 6 years ago

We were recently burned by a regression that caused an exponential number of transformers to be added to the pipeline because we didn't do a deep copy of the whitelist. If these constants had been frozen, we would have detected the error earlier.

gjtorikian commented 6 years ago

Thanks!