romshark / datapages / 37218728008

push

github

fix: Check WithDatastarJS URLs against RFC 3986

WithDatastarJS refuses a URL with & or ', which RFC 3986 allows:

    datapages.WithDatastarJS("https://cdn.example.com/ds.js?v=1&min=1")
    // WithDatastarJS: URL contains '&'

The page writes the URL HTML-escaped, not raw as the docs say.
Accept any URL valid according to RFC 3986 and refuse the rest.

5 of 5 new or added lines in 1 file covered. (100.0%)

16074 of 36613 relevant lines covered (43.9%)

578.78 hits per line