diff options
| author | Ian Lance Taylor <iant@golang.org> | 2016-06-22 09:47:42 -0700 |
|---|---|---|
| committer | Ian Lance Taylor <iant@golang.org> | 2016-06-23 04:30:07 +0000 |
| commit | bc3bcfd4e76195ead984e9d2ae1a1783d1272dc4 (patch) | |
| tree | ab9ef8c492c8676cc223d6b3e146b3ad159a42ea | |
| parent | b31ec5c564f02cf48d177853fd7bff9892be7ce6 (diff) | |
| download | go-bc3bcfd4e76195ead984e9d2ae1a1783d1272dc4.tar.xz | |
html/template: update security model link
Fixes #16148.
Change-Id: Ifab773e986b768602476824d005eea9200761236
Reviewed-on: https://go-review.googlesource.com/24327
Run-TryBot: Ian Lance Taylor <iant@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Andrew Gerrand <adg@golang.org>
| -rw-r--r-- | src/html/template/doc.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/html/template/doc.go b/src/html/template/doc.go index 1827403aa3..e1e9cad0af 100644 --- a/src/html/template/doc.go +++ b/src/html/template/doc.go @@ -166,7 +166,7 @@ that would have been produced if {{.}} was a regular string. Security Model -http://js-quasis-libraries-and-repl.googlecode.com/svn/trunk/safetemplate.html#problem_definition defines "safe" as used by this package. +https://rawgit.com/mikesamuel/sanitized-jquery-templates/trunk/safetemplate.html#problem_definition defines "safe" as used by this package. This package assumes that template authors are trusted, that Execute's data parameter is not, and seeks to preserve the properties below in the face |