qbit/go
1
0
Fork 0
mirror of https://github.com/golang/go synced 2024-11-22 02:14:40 -07:00
Code Releases Activity

html/template: fix URL doc

Browse Source 
This is the easy part of issue 3528.
(What to do about "noescape" is the hard part, left open.)

Update #3528.

R=mikesamuel, r, dsymonds
CC=golang-dev
https://golang.org/cl/6493113
This commit is contained in:
Russ Cox 2012-09-13 10:53:00 -04:00
parent ef87c0edae
commit 37721cc1ce
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/pkg/html/template/content.go
View File

@ -47,7 +47,7 @@ type (
// JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not. // JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not.
JSStr string JSStr string
// URL encapsulates a known safe URL as defined in RFC 3896. // URL encapsulates a known safe URL or URL substring (see RFC 3986).
// A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()` // A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()`
// from a trusted source should go in the page, but by default dynamic // from a trusted source should go in the page, but by default dynamic
// `javascript:` URLs are filtered out since they are a frequently // `javascript:` URLs are filtered out since they are a frequently