microcosm-cc / bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
https://github.com/microcosm-cc/bluemonday
BSD 3-Clause "New" or "Revised" License
3.16k stars 175 forks source link

Error when using & and amp in url #169

Open aimustaev opened 1 year ago

aimustaev commented 1 year ago

Hi! thanks for the great tool! However, we started using it and noticed this error, example: https://www.google.com/some-url/?c=1&amp=3 => https://www.google.com/some-url/?c=1&amp ;=3, that is, in the query parameters we have left: c=1&=3