lxml 6 no more drops control characters while parsing HTML input

qykth-git · frenzymadness · commit 86632c22cb80 · 2025-10-02T22:35:26.000+02:00
Newer lxml like lxml 6 encodes and keeps control characters
as neutralized form.
It eliminates some evil attempts.

Adds fixup to expected result text to pass doctest.
diff --git a/tests/test_clean.txt b/tests/test_clean.txt
@@ -84,7 +84,7 @@
   <body onload="evil_function()">
     <!-- I am interpreted for EVIL! -->
     <a href="javascript:evil_function()">a link</a>
-    <a href="javascrip%20t%20:evil_function()">a control char link</a>
+    <a href="j%01a%02v%03a%04s%05c%06r%07i%0Ep%20t%20:evil_function()">a control char link</a>
     <a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgidGVzdCIpOzwvc2NyaXB0Pg==">data</a>
     <a href="#" onclick="evil_function()">another link</a>
     <p onclick="evil_function()">a paragraph</p>
