docs(security): mark the various DomAdapters as unsafe. (#10868)

Part of #8511.
2016-08-17 13:42:18 -07:00
parent 4829fbb95c
commit 3009be8d6e
4 changed files with 15 additions and 0 deletions
--- a/modules/@angular/platform-server/src/parse5_adapter.ts
+++ b/modules/@angular/platform-server/src/parse5_adapter.ts
@ -35,6 +35,12 @@ function _notImplemented(methodName: any /** TODO #9100 */) {
 }

 /* tslint:disable:requireParameterType */
+/**
+ * A `DomAdapter` powered by the `parse5` NodeJS module.
+ *
+ * @security Tread carefully! Interacting with the DOM directly is dangerous and
+ * can introduce XSS risks.
+ */
 export class Parse5DomAdapter extends DomAdapter {
  static makeCurrent() {
    parser = new parse5.Parser(parse5.TreeAdapters.htmlparser2);