.../template

Issues and changes for 8 package(s) matching ".../template":

text/template, html/template: add MethodResolver and ExecuteWithResolverProposal

#82062 opened 1 day ago by dims

html/template: fmt.Fprintf call causes strings.Builder escape (during HTML escaping)NeedsInvestigationPerformance

#81997 opened 4 days ago by thevilledev

html/template: URL escaper calls fmt.Fprintf for every escaped byte and allocates for unchanged URLsNeedsInvestigationPerformance

#81984 opened 5 days ago by thevilledev

html/template: esoteric `jsCtx` bugs that may lead to XSSNeedsInvestigation

#81541 opened 3 weeks ago by thatnealpatel

html/template: JS context is not reset when template literal closesNeedsInvestigation

#81117 opened 1 month ago by neild

html/template: incorrectly classifies regexp literals after await and yield leading to potential XSSNeedsFix

#80897 opened 1 month ago by inimicalx2193

text/template: errorf misplaces format argsNeedsFix

#80718 opened 2 months ago by ikonst

html/template: iframe refererrpolicy attribute not properly escapedNeedsInvestigation

#80163 opened 3 months ago by rolandshoemaker

html/template: ping attribute not properly escapedNeedsInvestigation

#80162 opened 3 months ago by rolandshoemaker

html/template: incomplete jsBraceDepth CVE-2026-32289 fixNeedsInvestigation

#80161 opened 3 months ago by rolandshoemaker

html/template: various SVG attributes not escapedNeedsInvestigation

#80158 opened 3 months ago by rolandshoemaker

html/template: iframe srcdoc attribute not properly escapedFixPendingNeedsFixSecurity

#80154 opened 3 months ago by rolandshoemaker

html/template: attribute scanning does not treat / as a token boundary, unlike HTMLNeedsInvestigation

#79773 opened 4 months ago by thatnealpatel

html/template: consider applying meta refresh URL filtering to implicit URL syntaxNeedsInvestigation

#79644 opened 4 months ago by Saku0512

html/template: prevent CPU exhaustion in contextual escaper via recursion depth limitFixPending

#79014 opened 5 months ago by owvr27

text/template: add component, slot, and fill actions for named-prop compositionLibraryProposalProposal

#78857 opened 5 months ago by esrid

html/template: XSS due to templates such as <a href="{{.Scheme}}:{{.Body}}">LibraryProposalNeedsInvestigation

#78828 opened 5 months ago by nicholashusin

html/template: incorrect duplicate type attribute processing in <script> tags leading to insufficient escapingBugReportNeedsInvestigation

#78039 opened 7 months ago by vyivel

text/template: make the dot in range for iter.Seq2 match ranging over slices and mapsLibraryProposalProposal

#77345 opened 8 months ago by bep

html/template: provide JS variable population helper, disable arbitrary template actions inside of <script> contextsNeedsInvestigationSecurityThinking

#77031 opened 9 months ago by rolandshoemaker

text/template: TestIssue39807 failuresNeedsInvestigation

#74812 opened 1 year ago by gopherbot

text/template, html/template: Template.ExecuteLite skip resolution to methods to allow DCELibraryProposalProposal

#72895 opened 2 years ago by seankhliao

text/template: add more details to ExecErrorLibraryProposalProposal

#71801 opened 2 years ago by jessesimpson36

html/template: export filters and escapersProposal

#70375 opened 2 years ago by apleshkov

html/template: add a formatterProposal

#69413 opened 2 years ago by josharian

html/template: template Parse/Execute escaping raceNeedsDecisionSecurity

#69404 opened 2 years ago by rolandshoemaker

html/template: building pages dynamically with one function callProposal

#65924 opened 2 years ago by HarrisonHemstreet

text/template: annotations to enable static checking of syntax and semanticsProposal

#64543 opened 2 years ago by adonovan

html/template: incorrect parsing of script element with CDATA tag since 1.21.1NeedsInvestigation

#63464 opened 3 years ago by niallnsec

html/template: investigate using x/net/html for parsingNeedsInvestigation

#63392 opened 3 years ago by rolandshoemaker

html/template: investigate rewriting the JS parserNeedsInvestigation

#63371 opened 3 years ago by rolandshoemaker

html/template: comment handling introduced in 1.21.1 breaks valid scriptsNeedsInvestigationSecurity

#63183 opened 3 years ago by jupenur

html/template: unrecognized failuresNeedsInvestigation

#63052 opened 3 years ago by gopherbot

html/template: treatment of CDATA sections in foreign content diverges from browsersNeedsFixSecurity

#62617 opened 3 years ago by rolandshoemaker

text/template: unclear about pipelines as argumentsDocumentationNeedsInvestigationhelp wanted

#61029 opened 3 years ago by juriad

text/template: missingkey does not affect builtin "index" functionNeedsInvestigation

#60008 opened 3 years ago by WGH-

text/template: option for ignoring/returning errors in function callsProposal

#59868 opened 3 years ago by blmayer

text/template: export error type for missingkeyProposal

#57801 opened 3 years ago by sding3

text/template: add ability to send executed content to a pipelineProposal

#54748 opened 4 years ago by bvisness

text/template, html/template: add ExecuteFuncsFixPendingProposalProposal-Accepted

#54450 opened 4 years ago by zeripath

html/template: allow output of some html commentsProposal

#54380 opened 4 years ago by kbolino

html/template: default missingkey behavior does not match documentationDocumentationNeedsInvestigationhelp wanted

#54053 opened 4 years ago by rittneje

text/template: add "return" actionProposalProposal-Accepted

#53015 opened 4 years ago by josharian

html/template: Parsing invalid templates with no actions should fail-fastNeedsInvestigation

#52906 opened 4 years ago by josharian

text/template: allow callers to handle errorsProposal

#52437 opened 4 years ago by bep

html/template: AddParseTree does not set root template correctlyNeedsInvestigation

#48477 opened 5 years ago by bluekeyes

html/template: imagesrcset incorrectly escapedNeedsInvestigation

#47452 opened 5 years ago by hoox

text/template: safe navigation with ?.Proposal

#43608 opened 5 years ago by thernstig

html/template: escape unquoted attributes by first quoting themProposal

#43224 opened 5 years ago by empijei

html/template: escapes + to +NeedsDecision

#42506 opened 5 years ago by Dynom

html/template: unexpected semantic differences compared to text/templateNeedsInvestigation

#40075 opened 6 years ago by rsc

text/template: revise execution modelProposalv2

#36462 opened 6 years ago by bep

html/template: improve context representation for user-facing error messagesNeedsInvestigation

#30635 opened 7 years ago by empijei

html/template: SGML processing Instructions escapedNeedsDecision

#30168 opened 7 years ago by bep

html/template: ambiguous errors when style tag is not closedNeedsInvestigation

#29269 opened 7 years ago by noonien

text/template: allow callers to override IsTrueFeatureRequestNeedsDecision

#28391 opened 8 years ago by bep

html/template: does not recognize rgb() as a CSS colorNeedsInvestigationhelp wanted

#25446 opened 8 years ago by daviddengcn

html/template: parse failures lack sufficient context for debuggingNeedsInvestigation

#20773 opened 9 years ago by michaelsafyan

html/template: dynamic substrings in HTML tags or attributes can result in unsafe HTML outputNeedsFixhelp wanted

#19669 opened 9 years ago by stjj89

html/template: improve ErrBadHTML error reportNeedsFix

#19408 opened 9 years ago by perillo

text/template: consider broadening the set of built-in template funcsNeedsInvestigation

#15007 opened 10 years ago by adg

html/template: provide a way to specify the initial escaping context (JS or CSS) when parsingFeatureRequestNeedsInvestigation

#8762 opened 12 years ago by bradleypeabody