Merge branch bugfix/ZBUG-1948 into develop #5

ZBUG-1948: Fix for Problems viewing mail with owasp_html_sanitizer enabled
Zimbra · Jul 15, 2021 · bc58f58 · bc58f58
2 parents af450f2 + 1da3239
commit bc58f58
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/build.xml b/build.xml
@@ -4,7 +4,7 @@
  <!-- PROPERTIES -->
  <property file='build-custom.properties' />
 
- <property name='version'   value='20190610.2'/>
+ <property name='version'   value='20190610.3'/>
  <property name='name'      value='owasp-java-html-sanitizer'/>
  <property name='fullname'  value='${name}-${version}'/>
  <property name='Title'     value='OWASP Java HTML Sanitizer'/>

diff --git a/src/main/java/org/owasp/html/HtmlSanitizer.java b/src/main/java/org/owasp/html/HtmlSanitizer.java
@@ -248,7 +248,7 @@ private static HtmlStreamEventReceiver initializePolicy(
     // We do not want to bump right up against that limit.
     // 256 is substantially larger than the lower bound and well clear of the
     // upper bound.
-    balancer.setNestingLimit(256);
+    balancer.setNestingLimit(512);
     return preprocessor.wrap(balancer);
   }
 }