system
Describe <CVE-2021-35043>.
user
What is <CVE-2021-35043>?
assistant
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character..