Ivan Gabriele
00475f25c8
fix(doc): Add missing comma in example ( #8769 )
2016-05-26 09:50:59 -07:00
Vanga Sasidhar
bab6023eee
fix(router): Added pushState fallback for IE 9 browser.
...
Closes #6506
Closes #7929
2016-05-26 09:49:07 -07:00
Martin Probst
5e12a95789
test(security): test case for quoted URL values.
...
Test case that fixes #8701 . This is already supported with the latest sanitizer
changes, but it's good to have an explicit test case.
2016-05-26 09:39:23 -07:00
Rob Wormald
e5904f4089
fix(facade): change EventEmitter to be sync by default ( #8761 )
2016-05-26 09:34:04 -07:00
Victor Berchet
352ee53202
Revert "feat(AsyncPipe): allow onError argument"
...
This reverts commit 390046d7b3
.
CI fails for IE on win8.
PR #7990
2016-05-25 17:23:20 -07:00
Igor Minar
b9347eb01c
build: remove dependency on tsd and use @types/* instead
2016-05-25 16:42:28 -07:00
Igor Minar
4dbd8ed6b8
refactor: remove unnecessary annotations
2016-05-25 16:42:28 -07:00
Misko Hevery
cb980d3e43
fix(ci): incorrect import
2016-05-25 16:22:55 -07:00
Misko Hevery
d0a64f9c86
fix: broken build
2016-05-25 16:03:11 -07:00
Alex Eagle
16ef21d086
fix(ngc): depend on correct tsc-wrapped package
2016-05-25 15:34:43 -07:00
Miško Hevery
39ecd01b86
chore: audit @angular/core API classification ( #8808 )
2016-05-25 15:00:05 -07:00
Matias Niemelä
5e0f8cf3f0
feat(core): introduce support for animations
...
Closes #8734
2016-05-25 13:56:50 -07:00
Alex Eagle
4c26397937
chore(ngc): refactor out tsc-wrapped
...
This allows angular's build to depend on some extensions, but not on code generation, and breaks a cycle in the angular build
We now merge ts-metadata-collector into tsc-wrapped and stop publishing the former.
2016-05-25 09:45:55 -07:00
Igor Minar
2ab1085dfb
fix(core): remove @internal annotation from PLATFORM_CORE_PROVIDERS
...
This symbol is no longer reexported at the top level, so it's safe to not mark it as internal.
This fixes the offline compilation which got broken by this symbol not being present in the d.ts
files when the compiler tries to do a deep import.
Closes #8819
2016-05-25 08:22:07 -07:00
Igor Minar
16dfe3c63f
build: consolidate tsc to ease migration to @types/ based typings delivery
...
I actually tried to use @types/* directly but came across several issues which prevented me
from switching over:
- https://github.com/Microsoft/TypeScript/issues/8715
- https://github.com/Microsoft/TypeScript/issues/8723
2016-05-25 08:22:07 -07:00
Wesley Cho
53628e19ac
fix(compiler): add ability to parse : in * directives
...
- Add ability to parse bindings properly when `:` is present when using a directive with the `*` prefix
Closes #6038
2016-05-24 21:43:10 -07:00
Misko Hevery
62dd3ceb64
Revert "Don't update the location during initial router navigation"
...
This reverts commit d5066a9a0f
.
2016-05-24 21:43:10 -07:00
Jay Phelps
d5066a9a0f
Don't update the location during initial router navigation
...
Closes #6069
2016-05-24 21:34:59 -07:00
Alfonso Presa
5f3d02bc7c
fix(Animation): Problem decimals using commas as decimal separation
...
Tests where failing due to `.` character being used as decimal separator in some regional settings (like spanish for example)
Closes #6335
Closes #6338
2016-05-24 21:23:46 -07:00
Utsav Shah
92340350d2
fix(http): Set response.ok
...
The ok property was not being set on response objects.
It's now set based on the status code.
Closes #6390
Closes #6503
2016-05-24 21:20:27 -07:00
gdi2290
d4827caa08
refactor(DomRootRenderer): allow registeredComponents access
...
Closes #6584
2016-05-24 21:17:11 -07:00
Gabe Scholz
6ce13b68fa
Typo in web_workers.md
...
Closes #6694
2016-05-24 21:16:11 -07:00
Borys Semerenko
e82b700ad0
docs(directives): add a deprecation comment for properties, events
...
Closes #7059
2016-05-24 21:13:56 -07:00
Grégory Bataille
60a2ba87d4
fix( #7099 ): support for comment finishing with multiple dashes
...
<!-- xxxx ------->
The issue came from a lack of support for backtracking on string
matching.
The way it is done, if the "end pattern" for consumeRawText starts with
twice the same character, you end up having problem when your string
being parsed has 3 times this char
Example
End string: xxyz
string to parse: aaaaaaxxxyz
calling consumeRawText(false, 'x', attemptParseStr('xyz')) would fail
Closes #7119
2016-05-24 21:01:41 -07:00
cexbrayat
83c19a1fbc
fix(pipes): handle undefined value in slice
...
Closes #7152
2016-05-24 20:58:14 -07:00
Wassim Chegham
1513e201bb
docs(ContentChild): add example with refs
...
Add missing example on how ContentChild works with refs
Closes #7160
Closes #7162
2016-05-24 20:57:25 -07:00
Dmytro Kulyk
a38c9a1ef7
fix(Router) Fix detect active route in depth.
2016-05-24 20:51:51 -07:00
Misko Hevery
d5f5ce82ca
Revert "fix(compiler): support string tokens with `.` inside."
...
This reverts commit 67c80fbb5e
.
2016-05-24 20:51:51 -07:00
Kara Erickson
6dc88f5b61
fix(forms): radio buttons with different names should not share state
...
Closes #7051
2016-05-24 20:07:57 -07:00
Kara Erickson
7a2ce7ff21
fix(forms): update accessor value when native select value changes
...
Closes #8710
2016-05-24 20:03:49 -07:00
Matias Niemelä
1ac38bd69a
feat(renderer): add a `setElementStyles` method
2016-05-24 18:42:05 -07:00
Victor Berchet
390cefac72
refactor(testing/server): optimize imports
2016-05-24 14:00:00 -07:00
Thierry Templier
95af14b97c
feat(http): added withCredentials support
...
Taken into account the withCredentials property within the request options:
- added corresponding property in the RequestOptions class
- added corresponding property in the Request class
- handle this property when merging options
- set the withCredentials property on the XHR object when specified
Added a test in the xhr_backend_spec.ts to check that the property is actually
set on the XHR object
Closes https://github.com/angular/http/issues/65
Closes #7281
Closes #7281
2016-05-24 11:53:43 -07:00
Thierry Templier
0f0a8ade7c
feat(http): automatically set request Content-Type header based on body type
...
Implement the ability to provide objects as request body. The following use cases
are supported:
* raw objects: a JSON payload is created and the content type set to `application/json`
* text: the text is used as it is and no content type header is automatically added
* URLSearchParams: a form payload is created and the content type set to `application/x-www-form-urlencoded`
* FormData: the object is used as it is and no content type header is automatically added
* Blob: the object is used as it is and the content type set with the value of its `type` property if any
* ArrayBuffer: the object is used as it is and no content type header is automatically added
Closes https://github.com/angular/http/issues/69
Closes #7310
2016-05-24 11:42:37 -07:00
Andreas Wissel
016f0d8e9e
fix: Typo in async.ts
...
Closes #7382
2016-05-24 11:15:51 -07:00
Victor Berchet
3e5716ec16
feat(i18n): support implicit tags/attributes
2016-05-24 10:12:19 -07:00
Victor Berchet
75e6dfb9ab
fix(browser): platform code cleanup
2016-05-23 17:57:28 -07:00
Victor Berchet
f95a604b59
fix(bootstrap): swap coreBootstrap() and coreLoadAndBootstrap() arguments
2016-05-23 17:57:28 -07:00
Victor Berchet
3ff20cd7e3
fix(core): fix build
2016-05-23 17:56:48 -07:00
Kevin-K
17f73cb7bc
docs(http): fix MockBackend example
...
imports & syntax error fix
Closes #7383
2016-05-23 17:22:36 -07:00
Brendan Wyse
fba0e2ff12
docs(browser.ts): update bootstrap injector override argument name
...
Closes #7387
2016-05-23 17:21:07 -07:00
Vamsi V
b62415c962
refactor(chore): remove unused mapToObject and objectToMap methods from serializer
...
resolves #7402
Closes #7416
2016-05-23 17:20:25 -07:00
Tom Schoener
adc135e6c8
refactor(async_pipe): use subscription strategy interface
...
The strategies for Promise and Observable based subscriptions
have (nearly) the same method signatures. They should implement
a common interface.
Closes #7573
2016-05-23 17:02:56 -07:00
Tero Parviainen
ceac045a7f
fix(compiler): have CSS parser support nested parentheses inside functions
...
Closes #7580
2016-05-23 16:58:15 -07:00
Ward Bell
0a872ffd38
feat(core/linker): add SimpleChanges type to lifecycle_hooks to simplify OnChanges signature
...
Closes #8557
2016-05-23 16:11:52 -07:00
Pete Boere
6f3a6a55a0
Update url_search_params.ts
...
Values need to be encoded on `toString()`
Closes #7686
2016-05-23 14:43:26 -07:00
Vamsi Varikuti
0795dd307b
refactor(chore): Replace all 'bindings' with 'providers'
...
BREAKING CHANGE
Deprecated `bindings:` and `viewBindings:` are replaced with
`providers:` and `viewProviders:`
Closes #7687
2016-05-23 13:31:08 -07:00
Vamsi Varikuti
49fb7ef421
refactor(router): Remove deprecated 'as' from ‘RouteConfig’
...
BREAKING CHANGE
Remove deprecated 'as' from ‘RouteConfig’ in favour of ‘name’
2016-05-23 13:24:36 -07:00
Peter Bacon Darwin
cbeeff2bd6
fix(Router): do not kill event-emitter on navigation failure
...
Closes #7692
Closes #7532
Closes #7692
2016-05-23 13:21:09 -07:00
Sebastian Hillig
ce013a3dd9
feat(regex_url_paths): add `regex_group_names` to handle consistency with serializers
...
By adding `regex_named_groups` to regex route configurations we can consistently map
regex matching groups to component parameters.
This should fix #7554 .
Closes #7694
2016-05-23 13:18:21 -07:00
Justin DuJardin
c43636f2bb
fix(di): type error in InvalidProviderError
...
- when trying to instantiate an injector with an unknown provider
Closes #7729
2016-05-23 13:08:10 -07:00
cjc343
9c2fe660a3
(docs) Fix pony greeting equivalence
...
Cheatsheet claims equivalence between two statements which are not equivalent
Closes #7761
2016-05-23 13:07:20 -07:00
laco0416
abc266fa35
feat(common): DatePipe supports ISO string
...
Closes #7794
2016-05-23 12:30:02 -07:00
kurt
7d853dd9ad
fix(router): ensuring MatchedUrl pass query params
2016-05-23 12:24:08 -07:00
Alex Eagle
666dc75c15
chore(lint): disallow duplicate imports from a module
...
Closes #7859
2016-05-20 15:59:33 -07:00
Pete Mertz
830aecd1a7
fix(router/parsing): change route rule error to say PascalCase instead of CamelCase
...
Closes #7874
2016-05-20 15:39:30 -07:00
Rene Weber
2bf21e1747
fix(Router): replace state when normalized path is equal to current normalized path
...
Make sure the same path is not added multiple times to the history.
It is replacing the state, instead of skipping it completely,
because the current path in the browser might not be normalized,
while the given one is normalized.
Closes #7829
Closes #7897
2016-05-20 15:30:15 -07:00
Pascal Precht
9105ab9596
docs(ng_control_group): update API docs syntax
...
Closes #7357
2016-05-20 13:19:08 -07:00
mgechev
165357bfa3
refactor(forms): remove useless imports
...
Remove useless imports and change `bindings` to `providers` inside
`@Component` and `@Directive`.
Closes #7904
2016-05-20 13:13:27 -07:00
Andrew
33c7f74cb9
style(platform/browser): fix type spacing
...
Closes #7980
2016-05-20 13:05:40 -07:00
alexcastillo
cb84cbf545
feat(shadow_css): add encapsulation support for CSS @supports at-rule
...
Closes #7944
2016-05-20 13:02:24 -07:00
Elliott Davis
b2e0946696
fix(Request): Change Request.text's return type to string
...
Change the return typing for the .text method to `string` so typescript treats it
like a normal string.
Closes #8138
2016-05-20 12:57:31 -07:00
Tobias Bosch
67c80fbb5e
fix(compiler): support string tokens with `.` inside.
...
Closes #8178
2016-05-20 12:56:02 -07:00
Igor Minar
0035575c82
build: turn on tsc's stripInternal when producint public d.ts file
...
I also made some changes to fix imports and remove some stuff that caused
breakage once stripInternals was turned on.
2016-05-20 10:59:57 -07:00
Drew Moore
1bff47f97d
docs: fix syntax errors in HostBinding metadata example
...
add missing parentheses to getters, remove erroneous brackets in HostBindings
Closes #8269
2016-05-20 10:56:11 -07:00
Victor Berchet
e8e61de28d
refactor(WebWorker): move XHR worker side
2016-05-20 10:48:55 -07:00
Victor Berchet
54f8308999
refactor(browser): merge static & dynamic platforms
2016-05-20 10:48:55 -07:00
PatrickJS
6c99746f0b
Update tools.ts
...
Closes #8296
2016-05-20 10:12:54 -07:00
PatrickJS
4086b49046
feat(enableDebugTools): return ComponentRef
...
allows for
```
bootstrap(App, [
...HTTP_PROVIDERS,
...ROUTER_PROVIDERS
])
.then(enableDebugTools)
```
without breaking the rule of always returning a value in a promise
2016-05-20 10:12:54 -07:00
Jake Garelick
19e65382f7
fix(core): accurate dev mode message for dart ( #8403 )
2016-05-20 10:01:39 -07:00
Yang Lin
c6f2b3e96b
docs(router): fix import and replace RouteConfig ( #8433 )
2016-05-20 10:00:04 -07:00
mgechev
55921be1af
fix(router-deprecated): export RootRoute
...
Fix #8449
Closes #8450
2016-05-20 09:59:21 -07:00
agpreynolds
3857c8226e
docs(MockConnection) update mockRespond usage example ( #8487 )
...
Closes : #8486
2016-05-20 09:19:59 -07:00
Dimitrios Loukadakis
595bcdd1ac
fix(router): browser back and forward buttons not working correctly.
...
Closes #8524
Closes #8532
2016-05-19 22:42:08 -07:00
Rob Wormald
aec95015f8
docs(http): update http docs to mention .map operator
...
Closes #5947
2016-05-19 22:15:26 -07:00
gdi2290
390046d7b3
feat(AsyncPipe): allow onError argument
...
Closes #7990
2016-05-19 16:49:28 -07:00
PatrickJS
587c119c75
feat(NgZone): isStable
...
Closes #8108
2016-05-19 16:10:08 -07:00
Aliaksei Palkanau
3019140e7e
feat(http): set the statusText property from the XMLHttpRequest instance
...
Closes #4162
2016-05-19 15:58:59 -07:00
BeastCode
7a80f0d1e1
change property and event to use camel case
...
Closes #6580
2016-05-19 15:21:54 -07:00
BeastCode
0894318f50
change property and event to use camel case:
...
* some-property -> someProperty
* some-event -> someEvent
Closes #6609
2016-05-19 15:20:34 -07:00
William Welling
9019c6f937
Condition using component as well.
...
Closes #7755
2016-05-19 15:15:25 -07:00
William Welling
166b73f4f3
Condition using urlPath, component is null on UnresolvedException of child AsyncRoute.
2016-05-19 15:15:25 -07:00
Sekib Omazic
cb94111f18
style(Forms): remove unused imports
...
remove unused imports from the forms package
2016-05-19 14:50:33 -07:00
Kai Ruhnau
a88b887a05
docs(cheatsheet): Document SVG idiosyncrasies ( #6055 )
2016-05-19 10:20:08 -07:00
Victor Berchet
6e62217b78
fix(WebWorker): remove the platform-browser dependency on compiler
2016-05-18 16:23:09 -07:00
Joost de Vries
a01a54c180
adds 'repository' metadata to npm modules ( #8649 )
2016-05-17 23:17:15 -07:00
Hannah Howard
db8290632f
fix(upgrade): fallback to root ng2 injector when element is compiled outside the document ( #8684 )
...
Currently downgraded ng2 elements fail inside a ui-router view because they are unable
to require an ng2 Injector via the require attribute of the DDO, because ui-router compiles
its templates before they are inserted in a ui-view. This adds a "fallback" behavior if
a parent injector cannot be found to go to the root ng2 Injector.
2016-05-17 15:55:53 -07:00
Hannah Howard
6cdc53c497
fix(UpgradeNg1ComponentAdapter): make bindings available on $scope in controller & link function ( #8645 )
...
Delays NG1 Directive controller instatiation where possible and pre-link function always
to the ngOnInit() lifecycle hook. This way bindings are always available on $scope in both
the controller and the link function.
2016-05-17 14:53:59 -07:00
Martin Probst
15ae710d22
feat(security): allow url(...) style values.
...
Allows sanitized URLs for CSS properties. These can be abused for information
leakage, but only if the CSS rules are already set up to allow for it. That is,
an attacker cannot cause information leakage without controlling the style rules
present, or a very particular setup.
Fixes #8514 .
2016-05-17 11:23:31 +02:00
Martin Probst
dd50124254
feat(security): allow data: URLs for images and videos.
...
Allows known-to-be-safe media types in data URIs.
Part of #8511 .
2016-05-17 10:57:14 +02:00
Tobias Bosch
ff36b0384a
fix(compiler_cli): normalize used directives
...
- e.g. needed for content projection.
Closes #8677
2016-05-16 13:07:13 -07:00
Martin Probst
50c9bed630
feat(security): expose the safe value types.
...
This allows users to properly type their `SafeHtml`, `SafeStyle`, etc values.
Fixes #8568 .
2016-05-15 11:47:06 +02:00
Martin Probst
8b1b427195
feat(security): support transform CSS functions for sanitization.
...
Fixes part of #8514 .
2016-05-14 13:25:45 +02:00
Vikram Subramanian
9a05ca95f6
fix(build): Release compiler_cli packages along with rest of @angular packages and use ANGULAR_VERSION for package version and peer dependencies.
2016-05-13 13:35:10 -07:00
Marc Laval
61b339678d
test(compiler): test schema generation only in Chrome
...
Closes #8581
2016-05-11 17:01:26 -07:00
Alex Eagle
817ddfa847
fix(compiler): allow --noImplicitAny
2016-05-11 16:56:12 -07:00
Alex Eagle
c1154b30c7
fix(compiler): allow decorators defined in the same file
2016-05-11 16:56:12 -07:00
Alex Eagle
0d71345b93
fix(codegen): codegen all files in the program, not just roots
...
fixes #8475
2016-05-11 16:56:12 -07:00
Alex Eagle
9e3df8eefe
chore(tsickle): remove redundant jsdoc types
...
tsickle doesn't like them, and anyway they are bound to get out-of-sync with the inline TS types
2016-05-10 17:38:10 +02:00
Martin Probst
3e68b7eb1f
feat(security): warn users when sanitizing in dev mode.
...
This should help developers to figure out what's going on when the sanitizer
strips some input.
Fixes #8522 .
2016-05-09 16:46:31 +02:00
Matias Niemelä
9fbafba993
chore(parsing): change internal usage of `@` to `:` for namespaced values
...
Closes #8346
2016-05-09 16:20:32 +02:00
Martin Probst
7a524e3deb
feat(security): add tests for URL sanitization.
2016-05-09 16:00:24 +02:00
Martin Probst
7b6c4d5acc
feat(security): add tests for style sanitisation.
2016-05-09 16:00:24 +02:00
Martin Probst
f86edae9f3
feat(security): add an HTML sanitizer.
...
This is based on Angular 1's implementation, parsing an HTML document
into an inert DOM Document implementation, and then serializing only
specifically whitelisted elements.
It currently does not support SVG sanitization, all SVG elements are
rejected.
If available, the sanitizer uses the `<template>` HTML element as an
inert container.
Sanitization works client and server-side.
Reviewers: rjamet, tbosch , molnarg , koto
Differential Revision: https://reviews.angular.io/D108
2016-05-09 16:00:24 +02:00
Martin Probst
df1b1f6957
feat(security): strip XSSI prefix from XHR responses.
2016-05-05 14:25:44 -07:00
Martin Probst
9099160038
chore: fix comment indent.
2016-05-05 12:46:07 -07:00
Martin Probst
67ed2e2c0a
feat(security): fill in missing security contexts.
...
Reviewers: koto, rjamet, molnarg
Differential Revision: https://reviews.angular.io/D109
2016-05-04 19:28:50 -07:00
Tobias Bosch
6d36a7a45f
chore: fix unit tests on node.js
...
Closes #8476
2016-05-04 18:00:29 -07:00
Tobias Bosch
e2b1e1577d
fix(core): don’t detach nested view containers when destroying a view
...
When a view is destroyed, we destroy all
views in view containers and should not detach them. However, previously, we also detached them which lead to problems during the iteration loop.
Closes #8458
Closes #8471
Introduced by 0c600cf6e3
2016-05-04 16:27:20 -07:00
vsavkin
b30ddfbfc5
chore(router): clang-format
2016-05-04 15:01:27 -07:00
vsavkin
abfb522f83
refactor(router): reuse existing segmentes when constructing new route trees
2016-05-04 14:51:04 -07:00
vsavkin
b8136cc26e
fix(router): provide a top-level route segment for injection
2016-05-04 14:51:04 -07:00
vsavkin
d00b26d941
refactor(router): update link to reuse url segments when possible
2016-05-04 14:51:04 -07:00
vsavkin
12637a761c
refactor(router): make names consistent
2016-05-04 14:50:00 -07:00
vsavkin
1a0aea67a0
feat(core): add a component resolver that can load components lazily using system.js
2016-05-04 14:50:00 -07:00
vsavkin
0f1465b899
feat(router): update router to support lazy loading
2016-05-04 14:50:00 -07:00
Tobias Bosch
a81923b793
fix(compiler): emit correct types for literal arrays and maps.
2016-05-04 12:14:44 -07:00
Tobias Bosch
7150ace7c7
fix(compiler): support lifecycle hooks in compiler_cli
2016-05-04 12:14:43 -07:00
Tobias Bosch
bdce154282
chore: add test script for compiler_cli
2016-05-04 12:14:43 -07:00
Tobias Bosch
5a84048f72
chore: adjust build for `tools/metadata` name change
2016-05-04 12:14:38 -07:00
Igor Minar
52595f52f9
chore: make workaround_empty_observable_list_diff @internal
2016-05-04 01:12:40 -06:00
Tobias Bosch
edec158dd8
fix(compiler_cli): allow to use builtin directives like `NgIf`, …
...
Related to #8448
Closes #8454
2016-05-03 20:49:17 -07:00
Tobias Bosch
0297398f5e
chore: clang-format master
2016-05-03 18:56:39 -07:00
Igor Minar
9485f5a813
fix: platform-server should declare it's dependency on parse5 via package.json
2016-05-03 18:07:52 -06:00
Tobias Bosch
eba6e7946d
refactor(compiler_cli): move it into modules/@angular and integrate properly into the build
...
This also does no more depend on a version
on npm for the compiler_cli.
Also runs the tests for tools/metadata
2016-05-03 15:57:49 -07:00
Igor Minar
b600915953
build: add licensing preamble to umd bundles
2016-05-03 13:59:30 -06:00
Igor Minar
905f38acb8
build: fix source map paths for npm packages
...
the bundles have source mpas disabled for now because when we downlevel
the esm bundle to es5 tsc doesn't consider the original source map so
we end up with a source map pointing to the esm bundle instead which is
not useful.
2016-05-03 13:36:33 -06:00
Vikram Subramanian
509f4ec611
fix(testing): Check for pending macrotasks in ComponentFixture.whenStable() and ComponentFixture.isStable()
...
Closes #8389
2016-05-03 11:50:35 -07:00
Felix Itzenplitz
27a7b51d99
fix(docs): upgrade deprecated ngFor-Syntax
2016-05-03 11:49:33 -07:00
vsavkin
b98c9e74e1
docs(router): add api docs
2016-05-03 11:35:07 -07:00
vsavkin
9f784dcc5a
cleanup(router): fix e2e tests
2016-05-03 10:25:44 -07:00
vsavkin
b625f2471a
feat(router): make RouterLink accept single values
2016-05-03 10:25:44 -07:00
vsavkin
3aa2606ff1
cleanup(router): make names consistent
2016-05-03 10:25:44 -07:00
vsavkin
89704e0f93
fix(router): add support for ../
2016-05-03 10:25:44 -07:00
Martin Probst
908a102a87
feat: security implementation in Angular 2.
...
Summary:
This adds basic security hooks to Angular 2.
* `SecurityContext` is a private API between core, compiler, and
platform-browser. `SecurityContext` communicates what context a value is used
in across template parser, compiler, and sanitization at runtime.
* `SanitizationService` is the bare bones interface to sanitize values for a
particular context.
* `SchemaElementRegistry.securityContext(tagName, attributeOrPropertyName)`
determines the security context for an attribute or property (it turns out
attributes and properties match for the purposes of sanitization).
Based on these hooks:
* `DomSchemaElementRegistry` decides what sanitization applies in a particular
context.
* `DomSanitizationService` implements `SanitizationService` and adds *Safe
Value*s, i.e. the ability to mark a value as safe and not requiring further
sanitization.
* `url_sanitizer` and `style_sanitizer` sanitize URLs and Styles, respectively
(surprise!).
`DomSanitizationService` is the default implementation bound for browser
applications, in the three contexts (browser rendering, web worker rendering,
server side rendering).
BREAKING CHANGES:
*** SECURITY WARNING ***
Angular 2 Release Candidates do not implement proper contextual escaping yet.
Make sure to correctly escape all values that go into the DOM.
*** SECURITY WARNING ***
Reviewers: IgorMinar
Differential Revision: https://reviews.angular.io/D103
2016-05-03 09:21:43 -07:00
Tobias Bosch
dd6e0cf1b5
fix(compiler): fix where pipes live
...
Impure pipes need to live on the view
that used them and need a new instance for
each call site.
Impure pipes need to live on the component view, cached across all child views,
and need a new pure proxy for each for
each call site that lives on the view
of the call site.
Fixes #8408
This bug was introduced not long ago by 152a117d5c
2016-05-03 09:00:23 -07:00
Tobias Bosch
3a40cb1a85
fix(compiler): calculate the right moduleUrl
2016-05-02 22:36:32 -06:00
Tobias Bosch
00d3b6083c
fix(compiler): support css stylesheets in offline compiler
2016-05-02 15:06:46 -07:00
Tobias Bosch
43527172ed
chore: don’t shadow `tsconfig.json` used for editors by build specific tsconfig.json
2016-05-02 15:06:46 -07:00
Misko Hevery
107016ec12
chore: router move import changes
2016-05-02 13:27:03 -07:00
Miško Hevery
d930ad1816
chore: router move-only
2016-05-02 13:27:03 -07:00
Tobias Bosch
b6fd81169b
feat(core): support the decorator data that tsickle produces
2016-05-01 23:40:59 -07:00
Alex Eagle
3ae856ab8b
build(tsc): Use angular2-template-compiler in place of tsc
...
This lets us down-level Decorators with tsickle and produce .metadata.json
files for users to reference when offline-compiling their app.
2016-05-01 23:40:59 -07:00
Misko Hevery
3e17c99f4e
chore: clang-reformat
2016-05-01 22:59:41 -07:00
Misko Hevery
cd52318f48
fix: parse browser detection lazily
2016-05-01 22:27:55 -07:00
Misko Hevery
2570b72158
fix: textSelection on FireFox
2016-05-01 22:27:55 -07:00
Misko Hevery
6e79de794c
fix: function name shim test
2016-05-01 22:27:55 -07:00
Alex Eagle
c4be30d2e8
Revert "build(tsc): Use angular2-template-compiler in place of tsc"
...
This reverts commit 3d25294f706e0fd6224b20372be1e961959c0af8.
2016-05-01 20:51:00 -07:00
Alex Eagle
57240c85a5
build(tsc): Use angular2-template-compiler in place of tsc
...
This gives us tsickle pre-processing of Decorators, and produces
.metadata.json files for users to consume in their offline compilation.
2016-05-01 20:51:00 -07:00
Igor Minar
a66cdb469f
repackaging: all the repackaging changes squashed
2016-05-01 20:51:00 -07:00
Igor Minar
505da6c0a8
repackaging: all the file moves
2016-05-01 20:51:00 -07:00