Closed zhsj closed 1 year ago
I'll bump to the very latest, but cannot work around the changes in x/net/html .
This means that Microsoft style use of comments to create browser specific sections will no longer work in bluemonday.
The few attempts I've made to restore that functionality do not do it safely, that is... they create a huge security risk for those that allow comments.
The workaround here will be to post-process sanitized HTML to restore any desired HTML comments.
Due to https://github.com/golang/net/commit/06994584 HTML comment is escaped.