Oliver Hader

icon indicating a website link https://www.linkedin.com/in/oliverhader/ icon indicating an email [email protected]

icon company @TYPO3 @hofhaeckerei icon location Hof/Saale (DE) icon location @TYPO3 Security Team Lead & Core Developer, Web Software Engineer, Lecturer

Results 62 comments of Oliver Hader

[TASK] Update for TYPO3 11 LTS compatibility

@georgringer would you prefer having a version that is compatible with both TYPO3 v10 and v10 - or just having a TYPO3 v11 compatible version? Most probably I could work...

[TASK] Update for TYPO3 11 LTS compatibility

@drblitz-weblab Looks good to me. However, I don't have any permission to merge in this repository...

Continue parsing as data after invalid opening tag

> Note: the 20141028 version of the spec was used because the section numbering matches up with existing references in code. The relevant section for the living HTML5 spec is...

Ensure empty inline svg and math tags are serialized as void tags

Rebase on PR #260 once merged for addressing php-cs-fixer remarks.

Ensure empty inline svg and math tags are serialized as void tags

Thanks @goetas for taking care and creating new releases ❤️

PHP 8.1 fwrite(): Passing null to parameter #2 ($data) of type string is deprecated in Masterminds\HTML5\Serializer\OutputRules->wr()

Thanks for your report. Can you please provide a stack-trace that is leading up to this error? Thx!

possible false positive attribute with namespace "serif:id"

Can you please provide a simplified but complete example how `serif:id` is used? Please provide the whole SVG data - I'm basically interested in the XML namespace and the schema...

Remote links are not removed

This is not a link (in terms of hyperlink), but a remote resource reference used in CSS. Parsing and sanitizing CSS would be a completely new field here (with the...

Remote links are not removed

```xml url(https://test.com) ``` I guess this test fixture might be handy when removing these remote references from CSS as well. Probably https://packagist.org/packages/sabberworm/php-css-parser might be helpful when working on CSS contents.

Conditional sink support

I just realized that my previous approach in #5095 does not make much sense - instead I should have been used conditional tainted sinks like described in this issue. The...