Ville Vesilehto 42f9ee904c text/template: limit expression parenthesis nesting ... Deeply nested parenthesized expressions could cause a stack overflow during parsing. This change introduces a depth limit (maxStackDepth) tracked in Tree.stackDepth to prevent this. Additionally, this commit clarifies the security model in the package documentation, noting that template authors are trusted as text/template does not auto-escape. Fixes #71201 Change-Id: Iab2c2ea6c193ceb44bb2bc7554f3fccf99a9542f GitHub-Last-Rev: f4ebd1719f GitHub-Pull-Request: golang/go#73670 Reviewed-on: https://go-review.googlesource.com/c/go/+/671755 Reviewed-by: Roland Shoemaker <roland@golang.org> Reviewed-by: Michael Knyszek <mknyszek@google.com> Auto-Submit: Sean Liao <sean@liao.dev> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Rob Pike <r@golang.org>		2025-05-17 03:27:48 -07:00
..
scanner	text/scanner: add required ScanComments in example	2025-02-03 08:46:25 -08:00
tabwriter	text/tabwriter: add recovered panic message to rethrow	2024-02-29 16:46:34 +00:00
template	text/template: limit expression parenthesis nesting	2025-05-17 03:27:48 -07:00