fix(changelog): decode HTML entities in Mozilla advisory titles #125
Loading…
Reference in a new issue
No description provided.
Delete branch "rauty/zoryn:fix/mozilla-cve-html-entities"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Mozilla renders CVE titles as HTML, so "Copy & Paste" landed in the
spec %changelog verbatim (Thunderbird 153.0, CVE-2026-16378). Split the
entity decoder out of web_regex_parser's strip_html as decode_entities
and run the captured title through it.