Misago 0.29 is a security release that fixes an issue where previously escaped potentially dangerous HTML in parsed post is "unescaped" by Beautiful Soup 4 trying to "prettier" the HTML code.
Implementation changes
- 1453: Replace Beautiful Soup with custom HTML parser based on html5lib. Pass custom HTML representation to
clean_parsed
andparsing_result_processors
extension hooks.
Theme changes
- 1444: Align thread's flags and categories to left on small displays.