Alex Dowad fa83a8e15e Fix new conversion filter for HTML entities ...

While fuzzing the new mb_decode_numericentity implementation, I discovered
that the fast conversion filter for 'HTML-ENTITIES' did not correctly
handle an empty named entity ('&;'), nor did it correctly handle
invalid named entities whose names were a prefix of a valid entity.
Also, it did not correctly handle the case where a named entity is
truncated and another named entity starts abruptly.

2022-07-18 15:11:31 +02:00

2.7 KiB

Raw Permalink Blame History

View Raw