mganss / HtmlSanitizer

Cleans HTML to avoid XSS attacks
MIT License
1.52k stars 198 forks source link

Why is the AngleSharp dependency not at 1.0? #491

Open mganss opened 8 months ago

mganss commented 8 months ago

TL;DR HtmlSanitizer depends on AngleSharp.Css whose stable version is not at 1.0 yet and is incompatible with AngleSharp 1.0. If you want to use AngleSharp 1.0, use the latest prerelease version of HtmlSanitizer.

See also #87, #451 for in-depth discussions of this topic.

adnan-kamili commented 1 month ago

I am unable to upgrade the PreMailer.Net 2.6.0 -> AngleSharp (>= 1.1.0) because HtmlSanitizer 8.0.865 depends on AngleSharp (= 0.17.1).

mganss commented 1 month ago

@adnan-kamili Use the prerelease version of HtmlSanitizer (currently 8.1.866-beta)