All issues

Search results

safehtml/template: joinNames discards one branch's accumulated attribute names, so a nested conditional attribute name skips sanitization

Status: Open.

#19 In google/safehtml;

· MegaManSec opened on Aug 25, 2026

safehtml/template: safehtml.HTML values are written raw into quoted attribute values

Status: Open.

#18 In google/safehtml;

· MegaManSec opened on Aug 25, 2026

safehtml/template: one URL-ish rel token downgrades a <link href> that another token requires to be a TrustedResourceURL

Status: Open.

#17 In google/safehtml;

· MegaManSec opened on Aug 25, 2026

safehtml/template: escapeTree's cache key is coarser than context equality, so a sub-template can be escaped for the wrong context

Status: Open.

#16 In google/safehtml;

· MegaManSec opened on Aug 25, 2026

Consider tagging a new release for go.mod users and for pkg.go.dev documentation readers

Status: Open.

#13 In google/safehtml;

· ivucica opened on Oct 3, 2025

Can safehtml support custom attributes like one that HTMX requires?

Status: Open.

#11 In google/safehtml;

· mikeschinkel opened on Apr 4, 2024

add support for html meta tag

enhancementNew feature or requestNew feature or request

Status: Open.

#6 In google/safehtml;

· jamalc opened on Aug 17, 2020

safe identifier characters should include '.'

Status: Open.

#5 In google/safehtml;

· jba opened on Jul 15, 2020

safe identifier characters should include all Unicode alphanumerics

Status: Open.

#4 In google/safehtml;

· jba opened on Jul 15, 2020

empty safehtml.HTML is true, should be false

bugSomething isn't workingSomething isn't working

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#2 In google/safehtml;

· jba opened on Jun 30, 2020