league/commonmark 2.8.1

on PHP Packagist

What's Changed

This is a security release to address an issue where DisallowedRawHtml can be bypassed, resulting in a possible cross-site scripting (XSS) vulnerability.

Fixed

• Fixed DisallowedRawHtmlRenderer not blocking raw HTML tags with trailing ASCII whitespace (GHSA-4v6x-c7xx-hw9f)
• Fixed PHP 8.5 deprecation (#1107)

New Contributors

• @Kocal made their first contribution in #1106
• @freost made their first contribution in #1107

Full Changelog: 2.8.0...2.8.1