Patch release: fixes a crash when input contains null bytes inside a <meta charset> declaration.
Bug Fixes
Fixed ValueError: embedded null character crash when input contained a <meta charset> declaration with a null byte in the encoding name (e.g. b'<meta charset="\x00utf-8">'). codecs.lookup() raises ValueError on embedded nulls, and lookup_encoding() was only catching LookupError. Also added defensive ValueError catches in _validate_bytes() and _to_utf8() for completeness. (#369, thanks @DRMacIver for the report)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [chardet](https://github.com/chardet/chardet) ([changelog](https://chardet.readthedocs.io/en/latest/changelog.html)) | patch | `==7.4.2` → `==7.4.3` |
---
### Release Notes
<details>
<summary>chardet/chardet (chardet)</summary>
### [`v7.4.3`](https://github.com/chardet/chardet/releases/tag/7.4.3)
[Compare Source](https://github.com/chardet/chardet/compare/7.4.2...7.4.3)
Patch release: fixes a crash when input contains null bytes inside a `<meta charset>` declaration.
#### Bug Fixes
- Fixed `ValueError: embedded null character` crash when input contained a `<meta charset>` declaration with a null byte in the encoding name (e.g. `b'<meta charset="\x00utf-8">'`). `codecs.lookup()` raises `ValueError` on embedded nulls, and `lookup_encoding()` was only catching `LookupError`. Also added defensive `ValueError` catches in `_validate_bytes()` and `_to_utf8()` for completeness. ([#​369](https://github.com/chardet/chardet/issues/369), thanks [@​DRMacIver](https://github.com/DRMacIver) for the report)
**Full Changelog**: <https://github.com/chardet/chardet/compare/7.4.2...7.4.3>
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/Edmonton)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTMuMCIsInVwZGF0ZWRJblZlciI6IjQzLjExMy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
==7.4.2→==7.4.3Release Notes
chardet/chardet (chardet)
v7.4.3Compare Source
Patch release: fixes a crash when input contains null bytes inside a
<meta charset>declaration.Bug Fixes
ValueError: embedded null charactercrash when input contained a<meta charset>declaration with a null byte in the encoding name (e.g.b'<meta charset="\x00utf-8">').codecs.lookup()raisesValueErroron embedded nulls, andlookup_encoding()was only catchingLookupError. Also added defensiveValueErrorcatches in_validate_bytes()and_to_utf8()for completeness. (#369, thanks @DRMacIver for the report)Full Changelog: https://github.com/chardet/chardet/compare/7.4.2...7.4.3
Configuration
📅 Schedule: (in timezone America/Edmonton)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.