In particular for serviceAcc in https://cs.chromium.org/chromium/infra/go/src/go.chromium.org/luci/appengine/tsmon/settings.go?l=124&rcl=7ad046489c578e339b873886d6973abbe43cc137 (may be more) Suggested by samueltan@
The following revision refers to this bug: https://chromium.googlesource.com/infra/luci/luci-go.git/+/90fe58ff9f7da83fe90c78c5b4c9f8f7f3e04763 commit 90fe58ff9f7da83fe90c78c5b4c9f8f7f3e04763 Author: Vadim Shtayura <vadimsh@chromium.org> Date: Mon Sep 25 21:35:14 2017 Use html.EscapeString when interpolating %s in template.HTML strings. BUG= 768100 R=nodir@chromium.org Change-Id: I863d70eafa92d7abc24400006a1f48057186f0d9 Reviewed-on: https://chromium-review.googlesource.com/679925 Reviewed-by: Nodir Turakulov <nodir@chromium.org> Commit-Queue: Vadim Shtayura <vadimsh@chromium.org> [modify] https://crrev.com/90fe58ff9f7da83fe90c78c5b4c9f8f7f3e04763/appengine/gaeauth/server/settings.go [modify] https://crrev.com/90fe58ff9f7da83fe90c78c5b4c9f8f7f3e04763/appengine/tsmon/settings.go
Comment 1 by vadimsh@chromium.org
, Sep 23 2017