{"version":"2.1.181","anchor":"html-sanitizer-library-xss-filterxss-removed","canonical_anchor":"html-sanitizer-library-xss-filterxss-removed","heading":"HTML Sanitizer Library ( xss \/ filterXSS ) Removed","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.181\/e\/html-sanitizer-library-xss-filterxss-removed","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.181","markdown":"### HTML Sanitizer Library (`xss`\/`filterXSS`) Removed\n\nThe `xss` \/ `filterXSS` library (~550 lines of bundled CSS-property whitelist and HTML parser code) has been removed from the CLI bundle. Any HTML sanitization that still occurs uses simpler inline escaping (`CRr()` at line ~161643 for `&`, `<`, `>`, `\"`, `'`).\n\n**Evidence**\n\nRemoved `BZ6`, `UZ6`, `ucK`, `UcK`, `s58`, `t58`, `QZ6`, `flK`, `cZ6` modules (search for `\"filterXSS\"` \u2014 absent from new version)"}