From: Ian Lance Taylor Date: Wed, 22 Jun 2016 16:47:42 +0000 (-0700) Subject: html/template: update security model link X-Git-Tag: go1.7rc1~65 X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=bc3bcfd4e76195ead984e9d2ae1a1783d1272dc4;p=gostls13.git html/template: update security model link Fixes #16148. Change-Id: Ifab773e986b768602476824d005eea9200761236 Reviewed-on: https://go-review.googlesource.com/24327 Run-TryBot: Ian Lance Taylor TryBot-Result: Gobot Gobot Reviewed-by: Andrew Gerrand --- diff --git a/src/html/template/doc.go b/src/html/template/doc.go index 1827403aa3..e1e9cad0af 100644 --- a/src/html/template/doc.go +++ b/src/html/template/doc.go @@ -166,7 +166,7 @@ that would have been produced if {{.}} was a regular string. Security Model -http://js-quasis-libraries-and-repl.googlecode.com/svn/trunk/safetemplate.html#problem_definition defines "safe" as used by this package. +https://rawgit.com/mikesamuel/sanitized-jquery-templates/trunk/safetemplate.html#problem_definition defines "safe" as used by this package. This package assumes that template authors are trusted, that Execute's data parameter is not, and seeks to preserve the properties below in the face