A number of sanitizer vulnerabilities were fixed in core with bug 55332. We need to port these fixes over to Parsoid.
In particular, see the failing tests added to the blacklist in https://gerrit.wikimedia.org/r/117033
(It looks like bug 56846 lists a bunch more failing sanitizer tests.)
Version: unspecified
Severity: normal