]> git.maquefel.me Git - brevno-suite/hugo/commit
projects / brevno-suite / hugo / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 481baa0) | patch
markup/goldmark: Fix double-escaping of ampersands in link URLs
authorBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Fri, 3 Apr 2026 20:03:19 +0000 (22:03 +0200)
committerBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Sat, 4 Apr 2026 12:52:29 +0000 (14:52 +0200)
commitdc9b51d2e2fa1bfc2b7c68c01417bb7ae2c9c6a2
tree7792ceb946682ab2594b7aa0ea926ee20c7d07c8tree | snapshot
parent481baa08968e29e2a2771e9d6022c9f995b2fc11commit | diff
markup/goldmark: Fix double-escaping of ampersands in link URLs

The XSS fix in 479fe6c65 accidentally called util.EscapeHTML twice
on link destinations, causing `&` to render as `&amp;amp;` instead
of `&amp;`.

Fixes #14715

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
markup/goldmark/goldmark_integration_test.go diff | blob | history
markup/goldmark/render_hooks.go diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.