2 Commits

Author	SHA1	Message	Date
Roland Shoemaker	8e66b04771	html: use strings.EqualFold instead of lowering ourselves ... Instead of using strings.ToLower and == to check case insensitive equality, just use strings.EqualFold, even when the strings are only ASCII. This prevents us unnecessarily lowering extremely long strings, which can be a somewhat expensive operation, even if we're only attempting to compare equality with five characters. Thanks to Guido Vranken for reporting this issue. Fixes golang/go#70906 Fixes CVE-2024-45338 Change-Id: I323b919f912d60dab6a87cadfdcac3e6b54cd128 Reviewed-on: https://go-review.googlesource.com/c/net/+/637536 LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Auto-Submit: Gopher Robot <gobot@golang.org> Reviewed-by: Roland Shoemaker <roland@golang.org> Reviewed-by: Tatiana Bradley <tatianabradley@google.com>	2024-12-18 11:24:30 -08:00
Nigel Tao	ea127e889c	go.net/html: move exp/html and exp/html/atom here to the go.net ... sub-repo. It's a straight copy, except for these modifications: * "exp/html" and "exp/html/atom" imports were renamed, and * the "TODO... When this package moves out of exp" comment was deleted from atom/atom.go. The matching change is at https://golang.org/cl/7317043 The rationale was discussed at https://groups.google.com/d/topic/golang-nuts/Qq5hTQyPuLg/discussion R=adg, remyoudompheng, dave CC=golang-dev https://golang.org/cl/7310063	2013-02-11 11:55:20 +11:00