)]}'
{
  "commit": "3de643db506517b3e652a13cc0b56034cea6b8e6",
  "tree": "a2e207190d06aac565398bdbe5d91da3b2a25955",
  "parents": [
    "05c76ee9adc59087cf3ba77ee9c8fcfab61bf61c"
  ],
  "author": {
    "name": "Ian Alexander",
    "email": "jitsu@google.com",
    "time": "Wed Oct 14 11:59:52 2026 -0400"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Tue Oct 27 12:00:16 2026 -0700"
  },
  "message": "html: check all ancestor namespace transitions when rendering raw text\n\nIn childTextNodesAreLiteral, walking up the tree previously stopped at\nthe nearest foreign ancestor once an HTML integration point was found.\nHowever, that integration point may itself be a descendant of an element\nthat was foster-parented into a foreign namespace (such as \u003cmglyph\u003e or\n\u003cmalignmark\u003e fostered under \u003cmtext\u003e), causing a parser to resolve the\nsubtree in a different foreign namespace upon re-parsing the rendered\noutput.\n\nContinue walking the full ancestor chain and verify that every\ntransition from a non-empty namespace occurs at an HTML integration\npoint before emitting literal text.\n\nThanks to Ali Sherif (https://www.linkedin.com/in/ali-sherif-13812b276)\nfor reporting this issue.\n\nFixes CVE-2026-97045\nFor golang/go#82622\n\nChange-Id: I67d0006dce9023451905d8e96c4d1f3d05e769cc\nReviewed-on: https://go-internal-review.googlesource.com/c/net/+/6360\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\nReviewed-on: https://go-review.googlesource.com/c/net/+/855121\nReviewed-by: Neal Patel \u003cneal@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nAuto-Submit: Gopher Robot \u003cgobot@golang.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "767eeae2503ef682644d6b13f6486de0aab2f717",
      "old_mode": 33188,
      "old_path": "html/render.go",
      "new_id": "f356d48b755579d81e32f02b69b3569f1391df78",
      "new_mode": 33188,
      "new_path": "html/render.go"
    },
    {
      "type": "modify",
      "old_id": "2de92b237e2a89b46d6bbb3b619f28d3000f0d90",
      "old_mode": 33188,
      "old_path": "html/render_test.go",
      "new_id": "7066a3b0cb5981f5dbeffeadb1126ceccb4ade1b",
      "new_mode": 33188,
      "new_path": "html/render_test.go"
    }
  ]
}
