)]}'
{
  "commit": "a8fb2fe4f7378f816302b9f2f7b8290ce512e5dd",
  "tree": "7a0a06a8985b19847ffe56a3c05bd8dcc8a9f0e1",
  "parents": [
    "0dc5b7a5f81d7155ade6d5e9db35992998679932"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Mon May 04 14:01:10 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Thu May 21 18:12:45 2026 -0700"
  },
  "message": "html: properly render fostered elements in foreign content\n\nWhen we foster elements under another parent, there are complicated\nrules about which namespace may apply. This in particular affects\nchildTextNodesAreLiteral, which checks if we should be emitting raw\ntext, or escaped text.\n\nIn childTextNodesAreLiteral, check if there is an ancestor which has a\ndifferent namespace. If one is found, check if it\u0027s an HTML integration\npoint. If not, treat the node as if it were in its parents namespace, if\nso, treat it as HTML.\n\nThanks to Tristan Madani for reporting this issue.\n\nFixes CVE-2026-42502\n\nChange-Id: I0ae1780dae335e5f719d7f176cefa83670cfea3d\nReviewed-on: https://go-review.googlesource.com/c/net/+/781701\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nReviewed-by: Nicholas Husin \u003cnsh@golang.org\u003e\nTryBot-Bypass: Roland Shoemaker \u003croland@golang.org\u003e\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fe66eb44e8a03409bdb2a70d10dfb1f2f515ff43",
      "old_mode": 33188,
      "old_path": "html/parse_test.go",
      "new_id": "cafa34df89b514bc552131ab0ce104e4b550e66e",
      "new_mode": 33188,
      "new_path": "html/parse_test.go"
    },
    {
      "type": "modify",
      "old_id": "0157d89e1fda198f2a2f277da278e367d8dc6148",
      "old_mode": 33188,
      "old_path": "html/render.go",
      "new_id": "418fed00f388f1551efac969d864dbeb5316a509",
      "new_mode": 33188,
      "new_path": "html/render.go"
    },
    {
      "type": "modify",
      "old_id": "22d08641a01c3e4e18fc7428fb5e0c162d5e2e96",
      "old_mode": 33188,
      "old_path": "html/render_test.go",
      "new_id": "2de92b237e2a89b46d6bbb3b619f28d3000f0d90",
      "new_mode": 33188,
      "new_path": "html/render_test.go"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "2c0cd72c20da7023304d2070ddb60fde881a6a00",
      "new_mode": 33188,
      "new_path": "html/testdata/go/fostered_foreign_content.dat"
    }
  ]
}