Roland Shoemaker 6ec8895aa5 html: align in row insertion mode with spec ...

Update inRowIM to match the HTML specification. This fixes an issue
where a specific HTML document could cause the parser to enter an
infinite loop when trying to parse a </tbody> and implied </tr> next to
each other.

Fixes CVE-2025-58190
Fixes golang/go#70179

Change-Id: Idcb133c87c7d475cc8c7eb1f1550ea21d8bdddea
Reviewed-on: https://go-review.googlesource.com/c/net/+/709875
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>

2025-10-07 11:17:53 -07:00

..

atom

html: ensure <search> tag closes <p> and update tests

2025-03-12 15:46:46 -07:00

charset

…

testdata

…

comment_test.go

…

const.go

…

doc.go

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

doctype.go

html: use strings.EqualFold instead of lowering ourselves

2024-12-18 11:24:30 -08:00

entity_test.go

…

entity.go

…

escape_test.go

…

escape.go

…

example_test.go

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

foreign.go

html: use strings.EqualFold instead of lowering ourselves

2024-12-18 11:24:30 -08:00

iter_test.go

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

iter.go

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

node_test.go

…

node.go

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

parse_test.go

html: align in row insertion mode with spec

2025-10-07 11:17:53 -07:00

parse.go

html: align in row insertion mode with spec

2025-10-07 11:17:53 -07:00

render_test.go

…

render.go

all: fix some comments

2025-09-15 17:28:39 -07:00

token_test.go

all: fix some comments

2025-09-15 17:28:39 -07:00

token.go

html: properly handle trailing solidus in unquoted attribute value in foreign content

2025-03-27 12:51:24 -07:00