CVE-2023-3978 Improper rendering of text nodes in golang.org/x/net/html