diff options
Diffstat (limited to 'libgo/go/html/template')
| -rw-r--r-- | libgo/go/html/template/content.go | 2 | ||||
| -rw-r--r-- | libgo/go/html/template/url.go | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/libgo/go/html/template/content.go b/libgo/go/html/template/content.go index c1bd2e4949b..42ea7930f07 100644 --- a/libgo/go/html/template/content.go +++ b/libgo/go/html/template/content.go @@ -47,7 +47,7 @@ type ( // JSStr("foo\\nbar") is fine, but JSStr("foo\\\nbar") is not. JSStr string - // URL encapsulates a known safe URL as defined in RFC 3896. + // URL encapsulates a known safe URL or URL substring (see RFC 3986). // A URL like `javascript:checkThatFormNotEditedBeforeLeavingPage()` // from a trusted source should go in the page, but by default dynamic // `javascript:` URLs are filtered out since they are a frequently diff --git a/libgo/go/html/template/url.go b/libgo/go/html/template/url.go index 454c791ec31..2ca76bf389f 100644 --- a/libgo/go/html/template/url.go +++ b/libgo/go/html/template/url.go @@ -60,7 +60,7 @@ func urlProcessor(norm bool, args ...interface{}) string { c := s[i] switch c { // Single quote and parens are sub-delims in RFC 3986, but we - // escape them so the output can be embedded in in single + // escape them so the output can be embedded in single // quoted attributes and unquoted CSS url(...) constructs. // Single quotes are reserved in URLs, but are only used in // the obsolete "mark" rule in an appendix in RFC 3986 |