encoding/xml: allows a colon before or after an XML name

[DemiMarie]

Go version

go version go1.21.11 linux/amd64

Output of go env in your module/workspace:

GO111MODULE=''
GOARCH='amd64'
GOBIN=''
GOCACHE='/home/user/.cache/go-build'
GOENV='/home/user/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/home/user/go/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/home/user/go'
GOPRIVATE=''
GOPROXY='direct'
GOROOT='/usr/lib/golang'
GOSUMDB='off'
GOTMPDIR=''
GOTOOLCHAIN='local'
GOTOOLDIR='/usr/lib/golang/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.21.11'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/dev/null'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3671854511=/tmp/go-build -gno-record-gcc-switches'

What did you do?

https://go.dev/play/p/KE2dyxD0acX

What did you see happen?

xml.Unmarshal accepts <:a/>, <a:/>, <a :b="c"/>, and <a b:="c"/>.

What did you expect to see?

xml.Unmarshal should return an error because <:a/>, <a:/>, <a :b="c"/>, and <a b:="c"/> are all ill-formed XML. An XML name must not start or end with a colon.

[gabyhelp]

Related Issues

• encoding/xml: accepts invalid XML with multiple colons #20396 (closed)
• encoding/xml: accepts various ill-formed XML #68293
• encoding/xml: XML tag name that consist of ':' doesn't get umarshaled properly #62075
• encoding/xml: createAttrPrefix should ban "XMLanything" case insensitive, not just "xmlanything" #35151 (closed)
• encoding/xml: Decoder does not reject xml-ProcInst preceeded by other data #65691
• encoding/xml: Decoder doesn't recognize valid characters in entity names #3813 (closed)
• encoding/xml: It does not read correctly the field tag from xml.Name when it unmarshals an XML from a string #59178 (closed)
• encode/xml: Support XML namespaces #6517 (closed)
• encoding/xml: different marshal behavior in the Go 1.21.6 #65066 (closed)
• encoding/xml: marshaling/unmarshaling with namespace produces different results #21079 (closed)

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}

[cagedmantis]

@rsc

[cagedmantis]

Please note this related comment #68293 (comment)

[DemiMarie]

Please note this related comment #68293 (comment)

#68299 is that proposal

[gopherbot]

Change https://go.dev/cl/609377 mentions this issue: encoding/xml: treat a namespaced name as two names, not one