diff options
| author | Nodir Turakulov <nodir@google.com> | 2015-09-05 06:38:13 -0700 |
|---|---|---|
| committer | Russ Cox <rsc@golang.org> | 2016-09-29 20:12:31 +0000 |
| commit | ffd1c781b77aab542713b66ef387fa9307e4060b (patch) | |
| tree | 03871d9d252a7301d7c0c4abac6b91d0686a4b16 /src/database | |
| parent | f5516559e65175887f2fadb73cd8e5fdfc44bcd6 (diff) | |
| download | go-ffd1c781b77aab542713b66ef387fa9307e4060b.tar.xz | |
html/template: check "type" attribute in <script>
Currently any script tag is treated as a javascript container, although
<script type="text/template"> must not be. Check "type" attribute of
"script" tag. If it is present and it is not a JS MIME type, do not
transition to elementScript state.
Fixes #12149, where // inside text template was treated as regexp.
Fixes #6701
Change-Id: I8fc9e504f7280bdd800f40383c061853665ac8a2
Reviewed-on: https://go-review.googlesource.com/14336
Run-TryBot: Russ Cox <rsc@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Russ Cox <rsc@golang.org>
Diffstat (limited to 'src/database')
0 files changed, 0 insertions, 0 deletions