golang.net

mirror of https://github.com/golang/net.git synced 2026-03-31 10:27:08 +09:00

Files

Roland Shoemaker 8e66b04771 html: use strings.EqualFold instead of lowering ourselves

Instead of using strings.ToLower and == to check case insensitive
equality, just use strings.EqualFold, even when the strings are only
ASCII. This prevents us unnecessarily lowering extremely long strings,
which can be a somewhat expensive operation, even if we're only
attempting to compare equality with five characters.

Thanks to Guido Vranken for reporting this issue.

Fixes golang/go#70906
Fixes CVE-2024-45338

Change-Id: I323b919f912d60dab6a87cadfdcac3e6b54cd128
Reviewed-on: https://go-review.googlesource.com/c/net/+/637536
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Gopher Robot <gobot@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>

2024-12-18 11:24:30 -08:00

atom

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

charset

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

testdata

…

comment_test.go

…

const.go