angular-cn/tools
Martin Probst 908a102a87 feat: security implementation in Angular 2.
Summary:
This adds basic security hooks to Angular 2.

* `SecurityContext` is a private API between core, compiler, and
  platform-browser. `SecurityContext` communicates what context a value is used
  in across template parser, compiler, and sanitization at runtime.
* `SanitizationService` is the bare bones interface to sanitize values for a
  particular context.
* `SchemaElementRegistry.securityContext(tagName, attributeOrPropertyName)`
  determines the security context for an attribute or property (it turns out
  attributes and properties match for the purposes of sanitization).

Based on these hooks:

* `DomSchemaElementRegistry` decides what sanitization applies in a particular
  context.
* `DomSanitizationService` implements `SanitizationService` and adds *Safe
  Value*s, i.e. the ability to mark a value as safe and not requiring further
  sanitization.
* `url_sanitizer` and `style_sanitizer` sanitize URLs and Styles, respectively
  (surprise!).

`DomSanitizationService` is the default implementation bound for browser
applications, in the three contexts (browser rendering, web worker rendering,
server side rendering).

BREAKING CHANGES:
*** SECURITY WARNING ***
Angular 2 Release Candidates do not implement proper contextual escaping yet.
Make sure to correctly escape all values that go into the DOM.
*** SECURITY WARNING ***

Reviewers: IgorMinar

Differential Revision: https://reviews.angular.io/D103
2016-05-03 09:21:43 -07:00
..
analytics chore(): remove all angular2_material code. 2016-03-16 13:37:37 -07:00
broccoli fix(typescript): strip abstract keyword from properties in .d.ts 2016-05-01 02:59:15 +00:00
build feat(offline compiler): a replacement for tsc that compiles templates 2016-04-28 21:57:16 -07:00
cjs-jasmine chore: clang-reformat 2016-05-01 22:59:41 -07:00
code.angularjs.org chore(publish): add Rx bundles to code.angularjs.org publish step 2015-12-15 17:12:42 +00:00
compiler_cli fix(compiler): use absolute paths for comparing module urls 2016-05-02 22:40:00 -06:00
karma repackaging: all the repackaging changes squashed 2016-05-01 20:51:00 -07:00
metadata feat(offline compiler): add metadata emit 2016-05-02 11:47:59 -07:00
npm repackaging: all the repackaging changes squashed 2016-05-01 20:51:00 -07:00
public_api_guard feat: security implementation in Angular 2. 2016-05-03 09:21:43 -07:00
travis build(travis): add travis log folding for verbose tasks 2015-10-03 21:33:57 +00:00
tsc-watch chore: use `ng2tc` for compiling and running tests on ci 2016-05-01 23:40:59 -07:00
tslint revert(format): Revert "chore(format): update to latest formatter" 2016-04-12 09:41:01 -07:00
check-environment.js build(gulp): fail hard w/ legacy node version and provide clear upgrade instructions 2016-01-22 03:25:34 +00:00
chromedriverpatch.js chore(testing): update protractor to version 2.1.0 2015-05-20 17:28:23 -07:00
jsconfig.json chore(vscode): add jsconfig.json and remove .settings dir 2015-10-29 13:53:21 +00:00
tsconfig.json repackaging: all the repackaging changes squashed 2016-05-01 20:51:00 -07:00
tsd.json chore(typings): use mainline DefinitelyTyped repo rather than a fork. 2016-02-04 22:42:40 +00:00
utils.inc feat(bundle): add script to push bundles to code.angularjs.org 2015-04-14 14:50:53 -07:00