Replace Bleach (which is deprecated) with NH3 #8182

Closed
opened 2025-12-29 20:33:33 +01:00 by adam · 1 comment
Owner

Originally created by @arthanson on GitHub (Jun 9, 2023).

Originally assigned to: @arthanson on GitHub.

Proposed Changes

bleach is deprecated (see: https://github.com/mozilla/bleach/issues/698)
https://github.com/messense/nh3 is a nice replacement

Justification

Bleach is deprecated, pre notice: "Bleach sits on top of--and heavily relies on--html5lib which is no longer in active development. It is increasingly difficult to maintain Bleach in that context and I think it's nuts to build a security library on top of a library that's not in active development. "

Originally created by @arthanson on GitHub (Jun 9, 2023). Originally assigned to: @arthanson on GitHub. ### Proposed Changes bleach is deprecated (see: https://github.com/mozilla/bleach/issues/698) https://github.com/messense/nh3 is a nice replacement ### Justification Bleach is deprecated, pre notice: "Bleach sits on top of--and heavily relies on--html5lib which is no longer in active development. It is increasingly difficult to maintain Bleach in that context and I think it's nuts to build a security library on top of a library that's not in active development. "
adam added the status: acceptedtype: housekeeping labels 2025-12-29 20:33:33 +01:00
adam closed this issue 2025-12-29 20:33:33 +01:00
Author
Owner

@github-actions[bot] commented on GitHub (Sep 11, 2023):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Do not attempt to circumvent this process by "bumping" the issue; doing so will result in its immediate closure and you may be barred from participating in any future discussions. Please see our contributing guide.

@github-actions[bot] commented on GitHub (Sep 11, 2023): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. **Do not** attempt to circumvent this process by "bumping" the issue; doing so will result in its immediate closure and you may be barred from participating in any future discussions. Please see our [contributing guide](https://github.com/netbox-community/netbox/blob/develop/CONTRIBUTING.md).
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#8182