#167 Nekohtml update is breaking html based UI

[Priya Kumari]

Hi

Our application is currently using Nekohtml(1.9.6)
Recently there has been a Server side request forgery & vulnerability reported for XercesIml <=2.12.1
Since, Nekohtml(1.9.6) uses XercesIml version 2.8.1, so the application is exposed to the vulnerability.
So just wanted to know if there is any plan from Nekohtml side to upgrade the version which can mitigate this vulnerability beacuse as I could see the last relaese of Nekohtml is 1.9.22 ,around 2014-15 & this has XercesIml as 2.11.0 version.

Regards,
Priya

[Marc Guillemot]

NekoHtml Parser is deeply asleep. Perhaps can this fork help you: https://github.com/HtmlUnit/htmlunit-neko