Google Git
Sign in
go/net/0dc5b7a5f81d7155ade6d5e9db35992998679932
commit
0dc5b7a5f81d7155ade6d5e9db35992998679932
[log]
author
Roland Shoemaker <roland@golang.org>
Fri May 08 11:58:29 2026 -0700
committer
Gopher Robot <gobot@golang.org>
Thu May 21 18:12:42 2026 -0700
tree
873562403e0aa570e2b6649f4fc093f4b7cddea6
parent
a452f3cc17168a60bc3f439a3ae0fcffc32eca0e [diff]
html: properly check namespace in "in body" any other end tag

When processing "any other end tag" in the "in body" insertion mode,
when searching for a matching start tag, properly check that said tag is
in the HTML namespace.

Thanks to ensy for reporting this issue.

Fixes CVE-2026-42506

Change-Id: Ia05867b3d8f8df69f7e9410a85d126fe0b092875
Reviewed-on: https://go-review.googlesource.com/c/net/+/781700
Auto-Submit: Gopher Robot <gobot@golang.org>
TryBot-Bypass: Roland Shoemaker <roland@golang.org>
Reviewed-by: Nicholas Husin <husin@google.com>
Reviewed-by: Nicholas Husin <nsh@golang.org>
Reviewed-by: Neal Patel <nealpatel@google.com>
2 files changed
tree: 873562403e0aa570e2b6649f4fc093f4b7cddea6
  1. bpf/
  2. context/
  3. dict/
  4. dns/
  5. html/
  6. http/
  7. http2/
  8. http3/
  9. icmp/
  10. idna/
  11. internal/
  12. ipv4/
  13. ipv6/
  14. lif/
  15. nettest/
  16. netutil/
  17. proxy/
  18. publicsuffix/
  19. quic/
  20. route/
  21. trace/
  22. webdav/
  23. websocket/
  24. xsrftoken/
  25. .gitattributes
  26. .gitignore
  27. codereview.cfg
  28. CONTRIBUTING.md
  29. go.mod
  30. go.sum
  31. LICENSE
  32. PATENTS
  33. README.md
README.md

Go Networking

Go Reference

This repository holds supplementary Go networking packages.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.

The git repository is https://go.googlesource.com/net.

The main issue tracker for the net repository is located at https://go.dev/issues. Prefix your issue with “x/net:” in the subject line, so it is easy to find.