Bleach is deprecated suggestion for using nh3 instead

[Soham7777777]

On 2023-01-23, the Bleach package used for sanitizing HTML was deprecated. The nh3 package is best alternative in my opinion. flask-security still uses bleach with its "common" set of packages. Please change this as soon as possible, otherwise this is counted as security issue.

[jwag956]

Thanks for the issue - nh3 looks interesting. While bleach is 'deprecated' it is still being supported. Are you aware of any security reports against it?

[ThiefMaster]

Please change this as soon as possible, otherwise this is counted as security issue.

No it isn't. Read the relevant part of the issue you have even linked to:

We will continue to support Bleach:

• security updates
• support for new Python versions
• fixes for egregious bugs

[Soham7777777]

Alright, My bad. Its ok to use bleach. Not a security issue.