angular-cn/packages/core/test/util
Misko Hevery 6bf99e0eda fix(core): fix possible XSS attack in development through SSR (#40525)
This is a follow up fix for
894286dd0c.

It turns out that comments can be closed in several ways:
- `<!-->`
- `<!-- -->`
- `<!-- --!>`

All of the above are valid ways to close comment per:
https://html.spec.whatwg.org/multipage/syntax.html#comments

The new fix surrounds `<` and `>` with zero width space so that it
renders in the same way, but it prevents the comment to be closed eagerly.

PR Close #40525
2021-01-26 09:32:27 -08:00
..
array_utils_spec.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
decorators_spec.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
dom_spec.ts fix(core): fix possible XSS attack in development through SSR (#40525) 2021-01-26 09:32:27 -08:00
global_spec.ts refactor(core): remove custom globalThis (#40123) 2020-12-17 11:43:28 -08:00
lang_spec.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
stringify_spec.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00