douceur entries in go.mod

microcosm-cc / bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

https://github.com/microcosm-cc/bluemonday

BSD 3-Clause "New" or "Revised" License

3.12k stars 176 forks source link

Closed udf2457 closed 3 years ago

udf2457 commented 3 years ago

I noticed your go.mod has the following entries:

    github.com/aymerick/douceur v0.2.0 // indirect
    github.com/chris-ramon/douceur v0.2.0

Surely this is a bit risky as chris-ramon/douceur is currently 14 commits ahead, 2 commits behind aymerick.

Continuing to diverge from aymerick will mean you will eventually hit some obscure issue that is near impossible to troubleshoot ?

buro9 commented 3 years ago

Good catch, I've changed the import to the better maintained fork.