search

wuvt / wuvt-site

Website including a CMS, playlist information, and donation management tools
https://www.wuvt.vt.edu
GNU Affero General Public License v3.0
11 stars 12 forks source link

bleach is deprecated. #443

Open echarlie opened 4 months ago

echarlie commented 4 months ago

This doesn't really matter, as we depend on bleach<5 due to changes in style handling. but https://github.com/mozilla/bleach/issues/698 says bleach is deprecated and we should come up with a path forward

mutantmonkey commented 4 months ago

I think the best bet here is to clean up CSP and remove the unsafe-* options that we're currently using. Hopefully we're not pulling in any third party libraries that need that.