angular

History

Peter Bacon Darwin 2c5cf19c6d fix(core): use appropriate inert document strategy for Firefox & Safari (#22077 )

Both Firefox and Safari are vulnerable to XSS if we use an inert document
created via `document.implementation.createHTMLDocument()`.

Now we check for those vulnerabilities and then use a DOMParser or XHR
strategy if needed.

Further the platform-server has its own library for parsing HTML, so we
sniff for that (by checking whether DOMParser exists) and fall back to
the standard strategy.

Thanks to @cure53 for the heads up on this issue.

2018-02-13 10:05:14 -08:00

animations

feat(animations): allow @.disabled property to work without an expression (#18713 )

2017-08-18 23:32:13 -05:00

src

fix(core): use appropriate inert document strategy for Firefox & Safari (#22077 )

2018-02-13 10:05:14 -08:00

test

fix(core): use appropriate inert document strategy for Firefox & Safari (#22077 )

2018-02-13 10:05:14 -08:00

testing

Revert "fix(platform-browser): support customEqualityTesters when overriding Jasmine toEqual"