)]}'
{
  "commit": "e1fcd82abba34df74614020343be8eb1fe85f0d9",
  "tree": "c17c71fdf97b3caff772177f91b3bcb3bebafd6f",
  "parents": [
    "ebed060e8f30f20235f74808c22125fd86b15edd"
  ],
  "author": {
    "name": "Roland Shoemaker",
    "email": "roland@golang.org",
    "time": "Mon Feb 24 11:18:31 2025 -0800"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Thu Mar 27 12:51:24 2025 -0700"
  },
  "message": "html: properly handle trailing solidus in unquoted attribute value in foreign content\n\nThe parser properly treats tags like \u003cp a\u003d/\u003e as \u003cp a\u003d\"/\"\u003e, but the\ntokenizer emits the SelfClosingTagToken token incorrectly. When the\nparser is used to parse foreign content, this results in an incorrect\nDOM.\n\nThanks to Sean Ng (https://ensy.zip) for reporting this issue.\n\nFixes golang/go#73070\nFixes CVE-2025-22872\n\nChange-Id: I65c18df6d6244bf943b61e6c7a87895929e78f4f\nReviewed-on: https://go-review.googlesource.com/c/net/+/661256\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nReviewed-by: Roland Shoemaker \u003croland@golang.org\u003e\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3c57880d6979ace65723338f6a0afcde5c260b2a",
      "old_mode": 33188,
      "old_path": "html/token.go",
      "new_id": "6598c1f7b320fbb19ebf73af7e4c752a4f8ba508",
      "new_mode": 33188,
      "new_path": "html/token.go"
    },
    {
      "type": "modify",
      "old_id": "a36d112d74ed258d3839d2b8d243a70fdb86f424",
      "old_mode": 33188,
      "old_path": "html/token_test.go",
      "new_id": "44773f1712b2418ae32e7730cc7143380c9251ae",
      "new_mode": 33188,
      "new_path": "html/token_test.go"
    }
  ]
}