Lxml

Latest version: v5.3.0

Safety actively analyzes 681866 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 28

3.2.4

Not secure
==================

Features added
--------------

Bugs fixed
----------

* Memory leak when creating an XPath evaluator in a thread.

* LP1228881: ``repr(XSLTAccessControl)`` failed in Python 3.

* Raise ``ValueError`` when trying to append an Element to itself or
to one of its own descendants.

* LP1206077: htmldiff discarded whitespace from the output.

* Compressed plain-text serialisation to file-like objects was broken.

Other changes
-------------

3.2.3

Not secure
==================

Bugs fixed
----------

* Fix support for Python 2.4 which was lost in 3.2.2.

3.2.2

Not secure
==================

Features added
--------------

Bugs fixed
----------

* LP1185701: spurious XMLSyntaxError after finishing iterparse().

* Crash in lxml.objectify during xsi annotation.

Other changes
-------------

* Return values of user provided element class lookup methods are now
validated against the type of the XML node they represent to prevent
API class mismatches.

3.2.1

Not secure
==================

Features added
--------------

* The methods ``apply_templates()`` and ``process_children()`` of XSLT
extension elements have gained two new boolean options ``elements_only``
and ``remove_blank_text`` that discard either all strings or whitespace-only
strings from the result list.

Bugs fixed
----------

* When moving Elements to another tree, the namespace cleanup mechanism
no longer drops namespace prefixes from attributes for which it finds
a default namespace declaration, to prevent them from appearing as
unnamespaced attributes after serialisation.

* Returning non-type objects from a custom class lookup method could lead
to a crash.

* Instantiating and using subtypes of Comments and ProcessingInstructions
crashed.

Other changes
-------------

3.2.0

Not secure
==================

Features added
--------------

Bugs fixed
----------

* LP690319: Leading whitespace could change the behaviour of the string
parsing functions in ``lxml.html``.

* LP599318: The string parsing functions in ``lxml.html`` are more robust
in the face of uncommon HTML content like framesets or missing body tags.
Patch by Stefan Seelmann.

* LP712941: I/O errors while trying to access files with paths that contain
non-ASCII characters could raise ``UnicodeDecodeError`` instead of properly
reporting the ``IOError``.

* LP673205: Parsing from in-memory strings disabled network access in the
default parser and made subsequent attempts to parse from a URL fail.

* LP971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
of overwriting the current value.

* LP715687: lxml.html.clean no longer discards scripts that are explicitly
allowed by the user provided whitelist. Patch by Christine Koppelt.

Other changes
-------------

3.1.2

Not secure
==================

Features added
--------------

Bugs fixed
----------

* LP1136509: Passing attributes through the namespace-unaware API of
the sax bridge (i.e. the ``handler.startElement()`` method) failed
with a ``TypeError``. Patch by Mike Bayer.

* LP1123074: Fix serialisation error in XSLT output when converting
the result tree to a Unicode string.

* GH105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
by properly exported API function ``xmlBufUse()``.

Other changes
-------------

Page 14 of 28

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.