Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer using the built-in html formatter on …

Testing! てすてすてすと embed card with image and description 1234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901…

I've been a long user of pygments, it's been the thing that injects with funny little class names like and into the code blocks of my website. I've even…

TIL [[ pygments-htmlformatter ]] is a big win for [[ markata ]], didn't have a chance to take notes yesterday, but I'm really working on templates and themes.…