Reviewers: MikeSamuel,
Message:
Hello
mikes...@gmail.com (cc:
golan...@googlegroups.com),
I'd like you to review this change to
https://go.googlecode.com/hg/
Description:
html/template: fix URL doc
This is the easy part of issue 3528.
(What to do about "noescape" is the hard part, left open.)
Update issue 3528.
Please review this at
http://codereview.appspot.com/6493113/
Affected files:
M src/pkg/html/template/content.go
Index: src/pkg/html/template/content.go
===================================================================
--- a/src/pkg/html/template/content.go
+++ b/src/pkg/html/template/content.go
@@ -47,7 +47,7 @@
// JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not.
JSStr string
- // URL encapsulates a known safe URL as defined in RFC 3896.
+ // URL encapsulates a known safe URL as defined in RFC 3896 or a URL
substring.
// A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()`
// from a trusted source should go in the page, but by default dynamic
// `javascript:` URLs are filtered out since they are a frequently