code review 12708044: encoding/json: escape & always

src/pkg/html/template/escape_test.go

 // Copyright 2011 The Go Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
 package template
 
 import (
         "bytes"
         "encoding/json"
         "fmt"
@@ skipping 520 matching lines @@
                         `&iexcl;<b class="foo">Hello</b>, <textarea>O'World</textarea>!`,
                 },
                 {
                         "typed HTML in attribute",
                         `<div title="{{.W}}">`,
                         `<div title="&iexcl;Hello, O&#39;World!">`,
                 },
                 {
                         "typed HTML in script",
                         `<button onclick="alert({{.W}})">`,
-                        `<button onclick="alert(&#34;&amp;iexcl;\u003cb class=\&#34;foo\&#34;\u003eHello\u003c/b\u003e, \u003ctextarea\u003eO&#39;World\u003c/textarea\u003e!&#34;)">`,
+                        `<button onclick="alert(&#34;\u0026iexcl;\u003cb class=\&#34;foo\&#34;\u003eHello\u003c/b\u003e, \u003ctextarea\u003eO&#39;World\u003c/textarea\u003e!&#34;)">`,
                 },
                 {
                         "typed HTML in RCDATA",
                         `<textarea>{{.W}}</textarea>`,
                         `<textarea>&iexcl;&lt;b class=&#34;foo&#34;&gt;Hello&lt;/b&gt;, &lt;textarea&gt;O&#39;World&lt;/textarea&gt;!</textarea>`,
                 },
                 {
                         "range in textarea",
                         "<textarea>{{range .A}}{{.}}{{end}}</textarea>",
                         "<textarea>&lt;a&gt;&lt;b&gt;</textarea>",
@@ skipping 1090 matching lines @@
 
 func BenchmarkEscapedExecute(b *testing.B) {
         tmpl := Must(New("t").Parse(`<a onclick="alert('{{.}}')">{{.}}</a>`))
         var buf bytes.Buffer
         b.ResetTimer()
         for i := 0; i < b.N; i++ {
                 tmpl.Execute(&buf, "foo & 'bar' & baz")
                 buf.Reset()
         }
 }