Post from 2026-10-27 08:13:32

[RSS] Two parse5 bugs: text turning into HTML, and a two-character crash

https://joshua.hu/parse5-rewriting-stream-xss-surrogate-crash