cpython/Lib
Miss Islington (bot) 3937c78e36
[3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) (GH-133704)
According to the HTML5 spec, named character references in attribute values
should only be processed if they are not followed by an ASCII alphanumeric,
or an equals sign.
(cherry picked from commit 77b14a6d58)


https: //html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state

Co-authored-by: Sascha Ißbrücker <sascha.issbruecker@googlemail.com>
2025-05-09 09:43:21 +03:00
..
__phello__
_pyrepl [3.14] gh-133541: Handle SyntaxError raised by the tokenizer on user input (GH-133606) (#133709) 2025-05-08 20:41:01 +00:00
asyncio gh-91048: Add filename:line_no information to asyncio pstree (#133478) 2025-05-05 23:07:33 +00:00
collections Fix outdated reference link in collections module (gh-130349) 2025-02-20 23:58:58 +00:00
compression gh-132983: Add the compression.zstd pacakge and tests (#133365) 2025-05-06 01:38:08 +01:00
concurrent gh-132063: ensure that ProcessPoolExecutor does not swallow falsey exceptions (#132129) 2025-04-08 15:11:13 +00:00
ctypes gh-131747: ctypes: Deprecate _pack_ implicitly setting _layout_ = 'ms' (GH-133205) 2025-05-05 15:32:06 +02:00
curses
dbm
email gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
encodings gh-61456: Add Thai language codec aliases (#15079) 2025-04-07 13:06:32 +02:00
ensurepip gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
html [3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) (GH-133704) 2025-05-09 09:43:21 +03:00
http gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
idlelib gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
importlib gh-115942: Add locked to several multiprocessing locks (#115944) 2025-04-08 11:14:12 +03:00
json gh-133346: Make theming support in _colorize extensible (GH-133347) 2025-05-05 23:45:25 +02:00
logging gh-115032: Deprecate support for custom logging handlers with 'strm' argument. (GH-115314) 2025-04-27 22:18:14 +01:00
multiprocessing gh-131913: multiprocessing: add interrupt for POSIX (GH-132453) 2025-04-22 23:55:24 -07:00
pathlib GH-128520: pathlib ABCs: raise text encoding warnings at correct stack level (#133051) 2025-04-28 19:04:20 +01:00
pydoc_data Python 3.14.0b1 2025-05-06 18:33:52 +03:00
re gh-133306: Support \z as a synonym for \Z in regular expressions (GH-133314) 2025-05-03 07:54:33 +00:00
site-packages
sqlite3 gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
string gh-132661: Implement PEP 750 (#132662) 2025-04-30 11:46:41 +02:00
sysconfig gh-127405: Add ABIFLAGS to sysconfig variables on Windows (GH-131799) 2025-04-11 16:19:03 +01:00
test [3.14] gh-69426: HTMLParser: only unescape properly terminated character entities in attribute values (GH-95215) (GH-133704) 2025-05-09 09:43:21 +03:00
tkinter gh-130482: Add ability to specify name for tkinter.OptionMenu and tkinter.ttk.OptionMenu (GH-130502) 2025-05-02 14:38:50 +03:00
tomllib gh-133117: Enable stricter mypy checks for tomllib (#133206) 2025-05-03 16:57:09 +03:00
turtledemo
unittest gh-133346: Make theming support in _colorize extensible (GH-133347) 2025-05-05 23:45:25 +02:00
urllib GH-123599: url2pathname(): don't call gethostbyname() by default (#132610) 2025-05-05 17:03:42 +00:00
venv gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
wsgiref
xml gh-131938: Update exception message for Element.remove() when an element is not found (#131972) 2025-04-04 15:04:07 +00:00
xmlrpc
zipfile gh-132983: Add the compression.zstd pacakge and tests (#133365) 2025-05-06 01:38:08 +01:00
zoneinfo gh-114713: Revert gh-114731 (#133330) 2025-05-03 07:47:08 +00:00
__future__.py
__hello__.py
_aix_support.py
_android_support.py
_apple_support.py
_ast_unparse.py [3.14] gh-133581: Improve AST unparsing of t-strings (GH-133635) (#133666) 2025-05-08 13:40:44 +00:00
_collections_abc.py gh-132491: Rename annotationlib.value_to_string to type_repr (#132492) 2025-04-15 20:10:53 +00:00
_colorize.py gh-133346: Make theming support in _colorize extensible (GH-133347) 2025-05-05 23:45:25 +02:00
_compat_pickle.py
_ios_support.py
_markupbase.py
_opcode_metadata.py gh-100239: specialize BINARY_OP/SUBSCR for list-slice (#132626) 2025-05-01 10:28:52 +00:00
_osx_support.py
_py_abc.py
_py_warnings.py gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
_pydatetime.py gh-89157: Make C and Python implementation of datetime.date.fromisoformat consistent (#131007) 2025-04-24 17:16:07 +03:00
_pydecimal.py gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
_pyio.py gh-133036: Deprecate codecs.open (#133038) 2025-04-30 10:11:09 +09:00
_pylong.py
_sitebuiltins.py
_strptime.py gh-131434: Improve error reporting for incorrect format in strptime() (GH-131568) 2025-04-09 13:26:50 +03:00
_threading_local.py gh-107006: Move threading.local docstring to docs (#131840) 2025-05-05 15:00:15 +03:00
_weakrefset.py
abc.py
annotationlib.py [3.14] gh-133551: Support t-strings in annotationlib (GH-133553) (#133628) 2025-05-08 01:37:03 +00:00
antigravity.py
argparse.py gh-133346: Make theming support in _colorize extensible (GH-133347) 2025-05-05 23:45:25 +02:00
ast.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
base64.py
bdb.py gh-132536: Do not disable PY_THROW event in bdb (#132537) 2025-04-15 18:31:52 -04:00
bisect.py
bz2.py gh-132983: Introduce compression package and move _compression module (GH-133018) 2025-04-27 14:41:30 -07:00
calendar.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
cmd.py gh-133363: Fix Cmd completion for lines beginning with ! (#133364) 2025-05-03 22:50:37 -04:00
code.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
codecs.py gh-133036: Deprecate codecs.open (#133038) 2025-04-30 10:11:09 +09:00
codeop.py gh-132449: Improve syntax error messages for keywords with typos (#132450) 2025-04-22 11:01:55 +02:00
colorsys.py
compileall.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
configparser.py gh-130941: Fix configparser parsing values with allow_no_value and interpolation set (GH-130949) 2025-04-16 12:39:11 +02:00
contextlib.py
contextvars.py
copy.py
copyreg.py gh-132882: Fix copying of unions with members that do not support __or__ (#132883) 2025-04-24 16:49:09 +00:00
cProfile.py gh-132737: Support profiling modules that require __main___ (#132738) 2025-04-24 14:41:01 -04:00
csv.py
dataclasses.py gh-82129: Improve annotations for make_dataclass() (#133406) 2025-05-05 08:21:32 -07:00
datetime.py
decimal.py
difflib.py gh-130167: Improve `difflib.IS_LINE_JUNK` performance by using string methods (#130170) 2025-05-01 04:11:36 +00:00
dis.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
doctest.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
enum.py gh-132684: [Enum] only call _missing_ in __contains__ for Flags (GH-132790) 2025-04-24 23:13:54 -07:00
filecmp.py
fileinput.py
fnmatch.py gh-133306: Use \z instead of \Z in fnmatch.translate() and glob.translate() (GH-133338) 2025-05-03 17:58:21 +03:00
fractions.py gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
ftplib.py
functools.py [3.14] gh-125028: Prohibit placeholders in partial keywords (GH-126062) (GH-133645) 2025-05-08 08:26:14 +00:00
genericpath.py
getopt.py
getpass.py gh-77065: Add optional keyword-only argument echo_char for getpass.getpass (#130496) 2025-05-06 14:56:20 +03:00
gettext.py gettext: Remove outdated "TODO" comment (#130890) 2025-03-06 23:41:03 +00:00
glob.py gh-133306: Use \z instead of \Z in fnmatch.translate() and glob.translate() (GH-133338) 2025-05-03 17:58:21 +03:00
graphlib.py gh-130914: Make graphlib.TopologicalSorter.prepare() idempotent (#131317) 2025-03-18 16:28:00 -05:00
gzip.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
hashlib.py gh-122179: Fix hashlib.file_digest and non-blocking I/O (GH-122183) 2025-04-21 14:15:05 -07:00
heapq.py gh-110067: Make max heap methods public and add missing ones (GH-130725) 2025-05-05 17:52:49 +02:00
hmac.py gh-132388: Increase test coverage for HMAC (#132389) 2025-04-12 17:43:11 +00:00
imaplib.py
inspect.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
io.py gh-132952: Speed up startup by importing _io instead of io (#132957) 2025-04-28 08:38:56 -07:00
ipaddress.py
keyword.py
linecache.py gh-60115: Support frozen modules for linecache.getline() (#131638) 2025-04-02 19:50:01 -04:00
locale.py gh-118761: Always lazy import re in locale (#129860) 2025-03-27 15:47:08 +02:00
lzma.py gh-132983: Introduce compression package and move _compression module (GH-133018) 2025-04-27 14:41:30 -07:00
mailbox.py
mimetypes.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
modulefinder.py
netrc.py
ntpath.py
nturl2path.py GH-125866: Deprecate nturl2path module (#131432) 2025-03-19 19:33:01 +00:00
numbers.py
opcode.py gh-131738: optimize builtin any/all/tuple calls with a generator expression arg (#131737) 2025-03-28 10:35:20 +00:00
operator.py
optparse.py
os.py gh-127541: Update os.walk example (GH-127765) 2025-03-28 23:25:13 -07:00
pdb.py gh-133490: Fix syntax highlighting for remote PDB (#133494) 2025-05-06 11:44:49 +02:00
pickle.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
pickletools.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
pkgutil.py gh-131152, pkgutil: Remove unused imports (#131149) 2025-03-12 15:03:36 +01:00
platform.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
plistlib.py
poplib.py gh-130637: Add validation for numeric response data in stat() method (#130646) 2025-03-02 08:05:40 -05:00
posixpath.py
pprint.py
profile.py
pstats.py
pty.py
py_compile.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
pyclbr.py
pydoc.py gh-125142: add REPL help text for keyboard shortcuts (gh-125143) 2025-04-28 14:17:34 -07:00
queue.py
quopri.py
random.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
reprlib.py gh-132493: Avoid eager evaluation of annotations in @reprlib.recursive_repr() (#133411) 2025-05-05 19:20:11 -07:00
rlcompleter.py
runpy.py
sched.py
secrets.py
selectors.py
shelve.py
shlex.py gh-118761: Optimise import time for `shlex` (#132036) 2025-04-24 16:10:46 +01:00
shutil.py gh-132983: Add the compression.zstd pacakge and tests (#133365) 2025-05-06 01:38:08 +01:00
signal.py
site.py gh-132952: Speed up startup by importing _io instead of io (#132957) 2025-04-28 08:38:56 -07:00
smtplib.py
socket.py
socketserver.py
sre_compile.py
sre_constants.py
sre_parse.py
ssl.py
stat.py
statistics.py gh-132893: Minor edits to the statistics module PR (gh-133106) 2025-04-28 23:05:37 -05:00
stringprep.py
struct.py
subprocess.py gh-133089: Use original timeout value for TimeoutExpired when the func subprocess.run is called with a timeout (GH-133103) 2025-05-05 01:15:31 +00:00
symtable.py
tabnanny.py
tarfile.py gh-132983: Add the compression.zstd pacakge and tests (#133365) 2025-05-06 01:38:08 +01:00
tempfile.py gh-127371 Avoid unbounded growth SpooledTempfile.writelines (GH-127372) 2025-03-05 00:06:07 +02:00
textwrap.py gh-133306: Use \z instead of \Z in regular expressions in the stdlib (GH-133337) 2025-05-03 17:58:49 +03:00
this.py
threading.py gh-132578: Rename the threading.Thread._handle field (#132696) 2025-04-21 16:07:54 -07:00
timeit.py gh-131178: Update help message for timeit CLI (#131326) 2025-03-30 14:19:38 +03:00
token.py gh-131507: Add support for syntax highlighting in PyREPL (GH-133247) 2025-05-02 20:22:31 +02:00
tokenize.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
trace.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
traceback.py gh-133346: Make theming support in _colorize extensible (GH-133347) 2025-05-05 23:45:25 +02:00
tracemalloc.py
tty.py
turtle.py
types.py GH-118761: Expose more core interpreter types in `_types` (#132103) 2025-04-05 18:11:07 +00:00
typing.py typing: Modernize type annotations on IO classes (#133487) 2025-05-06 05:32:38 +00:00
uuid.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
warnings.py gh-128384: Use a context variable for warnings.catch_warnings (gh-130010) 2025-04-09 16:18:54 -07:00
wave.py
weakref.py
webbrowser.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
zipapp.py gh-130645: Add color to stdlib argparse CLIs (gh-133380) 2025-05-05 19:46:46 +02:00
zipimport.py gh-125746: Delay deprecated zipimport.zipimporter.load_module removal time to 3.15 (#125748) 2025-02-11 23:59:09 +00:00