angular/packages/core/test/bundling/router
Alan Agius b682c62873 fix(core): treat object[data] as resource URL context (#67797)
Previously, the `data` attribute of the `<object>` tag was being sanitized as a regular URL instead of a `ResourceURL`, which is security-sensitive.
This commit updates the runtime sanitization logic to correctly identify `object[data]` as a `ResourceURL` context. Additionally, the sanitizer lookup logic has been refactored to use a more efficient lookup map (`RESOURCE_MAP`) instead of multiple `Set` lookups, providing better performance and maintainability.

Added tests to verify the correct sanitization of `object[data]` and its behavior with trusted values.

PR Close #67797
2026-04-01 11:43:59 +02:00
..
BUILD.bazel build: rename defaults2.bzl to defaults.bzl (#63383) 2025-08-25 15:45:01 -07:00
bundle.golden_symbols.json fix(core): treat object[data] as resource URL context (#67797) 2026-04-01 11:43:59 +02:00
main.ts ci: reformat files 2025-12-16 14:44:19 -08:00
treeshaking_spec.ts build: migrate packages/core/test to new jasmine_test rule (#61902) 2025-06-12 10:00:09 +02:00