Launch Week Day 1: Announcing Security Design Review
UNKNOWN Go

Improper handling of special tags within script contexts in html/template

GO-2023-2043 · BIT-golang-2023-39319 · CVE-2023-39319

Published · Modified

Description

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in