diff options
| author | Russ Cox <rsc@golang.org> | 2012-09-22 05:55:10 +1000 |
|---|---|---|
| committer | Russ Cox <rsc@golang.org> | 2012-09-22 05:55:10 +1000 |
| commit | 717f1d6a6c28f87cf5232ad1162b0c3c2ce595b9 (patch) | |
| tree | 6c4a2618f0cc0685931f3ad9e767e84ce5aeeac4 | |
| parent | ed4d4cb231a3c88afa98dd2dde0c38faa79145c1 (diff) | |
| download | go-717f1d6a6c28f87cf5232ad1162b0c3c2ce595b9.tar.gz go-717f1d6a6c28f87cf5232ad1162b0c3c2ce595b9.zip | |
[release-branch.go1] html/template: fix URL doc
««« backport fead9e11a489
html/template: fix URL doc
This is the easy part of issue 3528.
(What to do about "noescape" is the hard part, left open.)
Update #3528.
R=mikesamuel, r, dsymonds
CC=golang-dev
https://golang.org/cl/6493113
»»»
| -rw-r--r-- | src/pkg/html/template/content.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/pkg/html/template/content.go b/src/pkg/html/template/content.go index c1bd2e4949..42ea7930f0 100644 --- a/src/pkg/html/template/content.go +++ b/src/pkg/html/template/content.go @@ -47,7 +47,7 @@ type ( // JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not. JSStr string - // URL encapsulates a known safe URL as defined in RFC 3896. + // URL encapsulates a known safe URL or URL substring (see RFC 3986). // A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()` // from a trusted source should go in the page, but by default dynamic // `javascript:` URLs are filtered out since they are a frequently |