File tree 1 file changed +8
-7
lines changed
1 file changed +8
-7
lines changed Original file line number Diff line number Diff line change @@ -377,12 +377,11 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
377
377
378
378
< dl id ="html/template "> < dt > < a href ="/pkg/html/template/ "> html/template</ a > </ dt >
379
379
< dd >
380
- < p > <!-- CL 37880 -->
381
- TODO: < a href ="https://golang.org/cl/37880 "> https://golang.org/cl/37880</ a > : panic if predefined escapers are found in pipelines during rewriting
382
- </ p >
383
-
384
- < p > <!-- CL 40936 -->
385
- TODO: < a href ="https://golang.org/cl/40936 "> https://golang.org/cl/40936</ a > : allow safe usage of predefined escapers in pipelines
380
+ < p > <!-- CL 37880, CL 40936 -->
381
+ The package now reports an error if a predefined escaper (one of
382
+ "html", "urlquery" and "js") is found in a pipeline and its
383
+ rewriting by the contextual auto-escaper could potentially lead
384
+ to security or correctness issues.
386
385
</ p >
387
386
388
387
</ dl > <!-- html/template -->
@@ -717,7 +716,9 @@ <h3 id="minor_library_changes">Minor changes to the library</h3>
717
716
< dl id ="text/template "> < dt > < a href ="/pkg/text/template/ "> text/template</ a > </ dt >
718
717
< dd >
719
718
< p > <!-- CL 38420 -->
720
- TODO: < a href ="https://golang.org/cl/38420 "> https://golang.org/cl/38420</ a > : fix handling of empty blocks
719
+ The handling of empty blocks, which was broken by a Go 1.8
720
+ change that made the result dependent on the order of templates,
721
+ has been fixed, restoring the old Go 1.7 behavior.
721
722
</ p >
722
723
723
724
</ dl > <!-- text/template -->
You can’t perform that action at this time.
0 commit comments