-
Notifications
You must be signed in to change notification settings - Fork 18.1k
text/html: MIME type "application/ld+json: should be escaped as JS #26054
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Teach the text/html package to understand the "application/ld+json" MIME type (used for JSON-LD data) as JS, so it can be apply the correct contextual escaping. Fixes golang#26053
Message from Gobot Gobot: Patch Set 1: Congratulations on opening your first change. Thank you for your contribution! Next steps: Most changes in the Go project go through a few rounds of revision. This can be During May-July and Nov-Jan the Go project is in a code freeze, during which Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Mike Samuel: Patch Set 1: Code-Review+1 Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
4016de0
to
d2f663c
Compare
9092511
to
95c3348
Compare
0090c13
to
8fbbf63
Compare
Message from Emmanuel Odeke: Patch Set 1: Run-TryBot+1 Code-Review+2 Thank you for working on this Evan and for the security nod, Mike! On the issue seems like Filippo gave a LGTM but I'll also loop him in Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Gobot Gobot: Patch Set 1: TryBots beginning. Status page: https://farmer.golang.org/try?commit=b46bfeed Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Gobot Gobot: Patch Set 1: Build is still in progress... Consult https://build.golang.org/ to see whether it's a new failure. Other builds still in progress; subsequent failure notices suppressed until final report. Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Emmanuel Odeke: Patch Set 1:
The trybot failure is unrelated to this change Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Emmanuel Odeke: Patch Set 1: Run-TryBot+1 Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Gobot Gobot: Patch Set 1: TryBot-Result-1 1 of 19 TryBots failed: Consult https://build.golang.org/ to see whether they are new failures. Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Emmanuel Odeke: Patch Set 1: Run-TryBot+1 RELNOTE=yes Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Agniva De Sarker: Patch Set 1: Emmanuel/Filippo - this is not merged yet. Since this has been posted and +2'd some time back, I think this is safe enough to go to 1.12. Anything blocking this ? Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Emmanuel Odeke: Patch Set 1:
Agniva, in deed. I think it is safe to go through and am just waiting for Filippo to send his final blessing that he posted on the issue. Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
Message from Filippo Valsorda: Patch Set 1: (1 comment) LGTM with a nit about the commit message. Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
@eklitzke - Wanted to ping you here since I did not see you copied in the gerrit CL. Would you be able to take a look at Filippo's comments ? Thanks ! |
Message from Ian Lance Taylor: Patch Set 2: Commit message was updated. Please don’t reply on this GitHub thread. Visit golang.org/cl/120835. |
This PR is being closed because golang.org/cl/120835 has been merged. |
Fixes #26053 Change-Id: Ic2052b1d0d4e0826a217a520c83d7bb0995ea72a GitHub-Last-Rev: 5a3eea3 GitHub-Pull-Request: #26054 Reviewed-on: https://go-review.googlesource.com/c/120835 Reviewed-by: Emmanuel Odeke <[email protected]>
Teach the text/html package to understand the "application/ld+json" MIME
type (used for JSON-LD data) as JS, so it can be apply the correct contextual
escaping.
Fixes #26053