mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
Ensures that namespaced <script> elements (such as :svg:script) are correctly classified as PreparsedElementType.SCRIPT by the template preparser and stripped during compilation to prevent potential XSS vulnerabilities. Consequently, obsolete security schema mappings and runtime sanitization checks for <script> attributes have been removed since these elements are never present in compiled template outputs. |
||
|---|---|---|
| .. | ||
| html_sanitizer_spec.ts | ||
| sanitization_spec.ts | ||
| url_sanitizer_spec.ts | ||