Elgato_dark/angular
1
0
Fork 0
mirror of https://github.com/angular/angular synced 2026-05-24 09:28:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
4305 commits 106 branches 1260 tags 1 GiB
Commit graph

5 commits

Author SHA1 Message Date
Martin Probst
8b1b427195 feat(security): support transform CSS functions for sanitization. 
Fixes part of #8514.
 2016-05-14 13:25:45 +02:00
Martin Probst
3e68b7eb1f feat(security): warn users when sanitizing in dev mode. 
This should help developers to figure out what's going on when the sanitizer
strips some input.

Fixes #8522.
 2016-05-09 16:46:31 +02:00
Martin Probst
7a524e3deb feat(security): add tests for URL sanitization. 2016-05-09 16:00:24 +02:00
Martin Probst
7b6c4d5acc feat(security): add tests for style sanitisation. 2016-05-09 16:00:24 +02:00
Martin Probst
f86edae9f3 feat(security): add an HTML sanitizer. 
This is based on Angular 1's implementation, parsing an HTML document
into an inert DOM Document implementation, and then serializing only
specifically whitelisted elements.

It currently does not support SVG sanitization, all SVG elements are
rejected.

If available, the sanitizer uses the `<template>` HTML element as an
inert container.

Sanitization works client and server-side.

Reviewers: rjamet, tbosch , molnarg , koto

Differential Revision: https://reviews.angular.io/D108
 2016-05-09 16:00:24 +02:00