Run govulncheck

internal/frontend: replace bluemonday with the simple sanitizer #122

Annotations

10 errors

dynconfig.Read calls io.ReadAll, which eventually calls internal.chunkedReader.Read

fetch.NewModCacheGetter calls filepath.Abs

fetch.modCacheModuleGetter.latestVersion calls filepath.Base

licenses.Detector.PackageInfo calls filepath.Clean

testhelper.TestDataPath calls filepath.Dir

symbol.Walker.ImportFrom calls build.Context.ImportDir, which eventually calls filepath.EvalSymlinks

symbol.LoadAPIFiles calls filepath.Glob

fetch.modCacheModuleGetter.ContentDir calls zip.NewReader, which eventually calls filepath.IsLocal

fetch.goPackagesModuleGetter.Open calls filepath.Join

fetch.NewGoPackagesStdlibModuleGetter calls packages.Load, which eventually calls filepath.Rel