html

Feb 10, 2025 GO-2025-3503

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jan 6, 2025 GO-2025-3503

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Dec 18, 2024 GO-2025-3503

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Dec 4, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Nov 8, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Changes in this version

type Node

+ func (n *Node) Ancestors() iter.Seq[*Node]

+ func (n *Node) ChildNodes() iter.Seq[*Node]

+ func (n *Node) Descendants() iter.Seq[*Node]

Oct 4, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Sep 5, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Aug 6, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jul 5, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jun 4, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

May 6, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Apr 4, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Apr 3, 2024 GO-2024-3333 +1 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Mar 4, 2024 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Feb 7, 2024 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jan 8, 2024 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Nov 27, 2023 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Nov 8, 2023 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Oct 10, 2023 GO-2024-2687 +2 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Oct 5, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Sep 5, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Aug 4, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Aug 1, 2023 GO-2023-2102 +3 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jul 5, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jun 13, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

May 4, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Apr 6, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Mar 5, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Feb 14, 2023 GO-2023-1988 +4 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Feb 8, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Jan 4, 2023 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Dec 6, 2022 GO-2023-1571 +5 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Dec 6, 2022 GO-2022-1144 +6 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Nov 7, 2022 GO-2022-1144 +6 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Oct 19, 2022 GO-2022-1144 +7 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1495: Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Changes in this version

+ var ErrBufferExceeded = errors.New("max buffer exceeded")

+ func EscapeString(s string) string

+ func Render(w io.Writer, n *Node) error

+ func UnescapeString(s string) string

+ type Attribute struct

+ Key string

+ Namespace string

+ Val string

+ type Node struct

+ Attr []Attribute

+ Data string

+ DataAtom atom.Atom

+ FirstChild *Node

+ LastChild *Node

+ Namespace string

+ NextSibling *Node

+ Parent *Node

+ PrevSibling *Node

+ Type NodeType

+ func Parse(r io.Reader) (*Node, error)

+ func ParseFragment(r io.Reader, context *Node) ([]*Node, error)

+ func ParseFragmentWithOptions(r io.Reader, context *Node, opts ...ParseOption) ([]*Node, error)

+ func ParseWithOptions(r io.Reader, opts ...ParseOption) (*Node, error)

+ func (n *Node) AppendChild(c *Node)

+ func (n *Node) InsertBefore(newChild, oldChild *Node)

+ func (n *Node) RemoveChild(c *Node)

+ type NodeType uint32

+ const CommentNode

+ const DoctypeNode

+ const DocumentNode

+ const ElementNode

+ const ErrorNode

+ const RawNode

+ const TextNode

+ type ParseOption func(p *parser)

+ func ParseOptionEnableScripting(enable bool) ParseOption

+ type Token struct

+ Attr []Attribute

+ Data string

+ DataAtom atom.Atom

+ Type TokenType

+ func (t Token) String() string

+ type TokenType uint32

+ const CommentToken

+ const DoctypeToken

+ const EndTagToken

+ const ErrorToken

+ const SelfClosingTagToken

+ const StartTagToken

+ const TextToken

+ func (t TokenType) String() string

+ type Tokenizer struct

+ func NewTokenizer(r io.Reader) *Tokenizer

+ func NewTokenizerFragment(r io.Reader, contextTag string) *Tokenizer

+ func (z *Tokenizer) AllowCDATA(allowCDATA bool)

+ func (z *Tokenizer) Buffered() []byte

+ func (z *Tokenizer) Err() error

+ func (z *Tokenizer) Next() TokenType

+ func (z *Tokenizer) NextIsNotRawText()

+ func (z *Tokenizer) Raw() []byte

+ func (z *Tokenizer) SetMaxBuf(n int)

+ func (z *Tokenizer) TagAttr() (key, val []byte, moreAttr bool)

+ func (z *Tokenizer) TagName() (name []byte, hasAttr bool)

+ func (z *Tokenizer) Text() []byte

+ func (z *Tokenizer) Token() Token