Ashish Kataria

AntiSamy fails to parse CSS with modern @media syntax, error: org.w3c.css.sac.CSSParseException: Identifier expected.

7

When sanitizing HTML that includes tags containing modern CSS3 media queries (multiple media queries, separated by commas), AntiSamy throws a CSSParseException originating from Apache Batik’s CSS parser. This causes the...

Fix: Safely skips comma-separated media types in CSS parser

2

The current fix only improves stability (treat this as an enhancement) - With this fix, AntiSamy no longer fails or strips the entire block when encountering comma-separated media rules. Instead,...