Readers Web will be responsible for maintaining the library.

Are you planning to fork BeautifulSoup? Or did you mean something else..?

Copy & paste fail. ;(

FTR this is lower priority than T177765: Security review of mediawiki-services-chromium-render.

In T178077#3723899, @phuedx wrote:

FTR this is lower priority than T177765: Security review of mediawiki-services-chromium-render.

I can tell, but I basically looked at them all at the same time. I've found not issues with BeautifulSoup. I know that it's use here is generally limited, but I assumed that some user-controlled HTML make make it through to this parser and tested for DoS via resource consumption, code execution via entity expansion, failure to maintain entity encoding, etc. and found no concerns. A quick question which I should I have clarified before: will you be using HTMLParser, or an external parser (lxml, html5lib, etc.)?

will you be using HTMLParser, or an external parser (lxml, html5lib, etc.)?

We'll be using the Python 3's default html.parser for now: https://github.com/kodchi/ppg/blob/master/src/process_toc.py#L26

Thanks for taking the time to review this, @dpatrick!