[
https://issues.apache.org/jira/browse/JSPWIKI-1063?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18134705#comment-18134705
]
Arturo Bernal commented on JSPWIKI-1063:
----------------------------------------
Checked in the code of master. nekohtml 2.1.3 is still declared, through the
property nekohtml.version of the root pom, in jspwiki-main and in
jspwiki-wysiwyg. Pull request 548 (https://github.com/apache/jspwiki/pull/548,
also for JSPWIKI-1206 and JSPWIKI-1221) replaces it with htmlunit-neko 5.6.0.
As its description says, only jspwiki-wysiwyg uses the parser, to turn the HTML
of the wysiwyg editor into XHTML, and jspwiki-main declared the dependency
without using it, so the pull request drops it there.
It is not merged yet. The maintainer of htmlunit-neko wrote in the pull request
that version 5.7.0 will add limits against denial of service attacks, and I am
waiting for it to run the tests again. Leaving the issue open until the pull
request is merged.
> Replace nekohtml with a different parser
> ----------------------------------------
>
> Key: JSPWIKI-1063
> URL: https://issues.apache.org/jira/browse/JSPWIKI-1063
> Project: JSPWiki
> Issue Type: Improvement
> Components: Core & storage
> Reporter: Jürgen Weber
> Priority: Minor
>
> JSPWiki has a dependency on Xerces XML parser via nekohtml.
> Necohtml is used for parsing the HTML that a Wysiwyg Editor produces.
> nekohtml should be replaced by a different implementation that has no large
> dependencies and should use the JDK XML Parser.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
