4 Commits

Author	SHA1	Message	Date
Roland Shoemaker	59706cdaa8	html: impose open element stack size limit ... The HTML specification contains a number of algorithms which are quadratic in complexity by design. Instead of adding complicated workarounds to prevent these cases from becoming extremely expensive in pathological cases, we impose a limit of 512 to the size of the stack of open elements. It is extremely unlikely that non-adversarial HTML documents will ever hit this limit (but if we see cases of this, we may want to make the limit configurable via a ParseOption). Thanks to Guido Vranken and Jakub Ciolek for both independently reporting this issue. Fixes CVE-2025-47911 Fixes golang/go#75682 Change-Id: I890517b189af4ffbf427d25d3fde7ad7ec3509ad Reviewed-on: https://go-review.googlesource.com/c/net/+/709876 Reviewed-by: Damien Neil <dneil@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>	2025-10-07 11:18:01 -07:00
Nigel Tao	1d46ed8b48	html: have Render escape comments less often ... Fixes golang/go#58246 Change-Id: I3effbd2afd7e363a42baa4db20691e57c9a08389 Reviewed-on: https://go-review.googlesource.com/c/net/+/469056 TryBot-Result: Gopher Robot <gobot@golang.org> Run-TryBot: Nigel Tao <nigeltao@golang.org> Reviewed-by: Bryan Mills <bcmills@google.com> Reviewed-by: Kunpei Sakai <namusyaka@gmail.com> Reviewed-by: Damien Neil <dneil@google.com>	2023-02-28 08:42:21 +00:00
Dmitry Savintsev	3d87fd621c	x/net/html: Sync the html parser and atom with the current whatwg spec ... The current documentation as well as set of atoms and attributes has gotten slightly out of sync with the current state of the WHATWG html5 specification. The change adds and removes several of the atoms and attributes, updates the documentation (such as steps numbering in inBodyEndTagFormatting) and modifies the spec URLs to https:// Change-Id: I6dfa52785858c1521301b20b1e585e19a08b1e98 Reviewed-on: https://go-review.googlesource.com/6173 Reviewed-by: Nigel Tao <nigeltao@golang.org>	2015-03-03 04:37:39 +00:00
Nigel Tao	ea127e889c	go.net/html: move exp/html and exp/html/atom here to the go.net ... sub-repo. It's a straight copy, except for these modifications: * "exp/html" and "exp/html/atom" imports were renamed, and * the "TODO... When this package moves out of exp" comment was deleted from atom/atom.go. The matching change is at https://golang.org/cl/7317043 The rationale was discussed at https://groups.google.com/d/topic/golang-nuts/Qq5hTQyPuLg/discussion R=adg, remyoudompheng, dave CC=golang-dev https://golang.org/cl/7310063	2013-02-11 11:55:20 +11:00