php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #72379 support tidy-html5 in addition to legacy htmltidy
Submitted: 2016-06-10 14:50 UTC Modified: 2016-07-12 17:51 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: michael at orlitzky dot com Assigned: ab (profile)
Status: Closed Package: Tidy (PECL)
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: michael at orlitzky dot com
New email:
PHP Version: OS:

 

 [2016-06-10 14:50 UTC] michael at orlitzky dot com
Description:
------------
The "tidy" extension is currently based off the "HTML tidy" project, which has gone extinct. For reference, see its SourceForge page,

  http://tidy.sourceforge.net/

which points you towards its successor tidy-html5. The older project is now bit-rotting, and has some vulnerabilities (CVE-2015-5522 and CVE-2015-5523) that won't be fixed.

The PHP build system should accept tidy-html5 (they're compatible) instead of the legacy project.



Patches

Pull Requests

Pull requests:

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-06-10 14:57 UTC] michael at orlitzky dot com
I've created a pull request which adds this feature:

https://github.com/php/php-src/pull/1940
 [2016-06-11 10:33 UTC] cmb@php.net
-Package: *General Issues +Package: Tidy
 [2016-07-12 17:51 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2016-07-12 17:51 UTC] ab@php.net
The PR is merged with master, link to bug #72554.

Thanks.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Thu Jul 03 00:01:35 2025 UTC