title: Improper handling of JavaScript whitespace in html/template
description: Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
problem types: CWE-74: Improper input validation
affected:
{
vendor: Go standard library
product: html/template
collectionURL: https://pkg.go.dev
packageName: html/template
versions:
version: 0, lessThan: 1.19.9, status: affected, versionType: semver
version: 1.20.0-0, lessThan: 1.20.4, status: affected, versionType: semver
programRoutines:
name: nextJSCtx
name: Template.Execute
name: Template.ExecuteTemplate
defaultStatus: unaffected
}