html/template: fix URL doc

This is the easy part of issue 3528.
(What to do about "noescape" is the hard part, left open.)

Update #3528.

R=mikesamuel, r, dsymonds
CC=golang-dev
https://golang.org/cl/6493113

diff --git a/src/pkg/html/template/content.go b/src/pkg/html/template/content.go
index c1bd2e4949b4373458b31901dd401839a3757462..42ea7930f07f93e83b122a8596f3585dbf5ddcd3 100644 (file)
--- a/src/pkg/html/template/content.go
+++ b/src/pkg/html/template/content.go
@@ -47,7 +47,7 @@ type (
        // JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not.
        JSStr string
 
-       // URL encapsulates a known safe URL as defined in RFC 3896.
+       // URL encapsulates a known safe URL or URL substring (see RFC 3986).
        // A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()`
        // from a trusted source should go in the page, but by default dynamic
        // `javascript:` URLs are filtered out since they are a frequently