parent
1293da1cf7
commit
d11b0c0c41
|
@ -328,9 +328,9 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
|
||||||
* Tag and property name are statically known and cannot change at runtime, i.e. it is not
|
* Tag and property name are statically known and cannot change at runtime, i.e. it is not
|
||||||
* possible to bind a value into a changing attribute or tag name.
|
* possible to bind a value into a changing attribute or tag name.
|
||||||
*
|
*
|
||||||
* The filtering is white list based. All attributes in the schema above are assumed to have the
|
* The filtering is based on a list of allowed tags|attributes. All attributes in the schema
|
||||||
* 'NONE' security context, i.e. that they are safe inert string values. Only specific well known
|
* above are assumed to have the 'NONE' security context, i.e. that they are safe inert
|
||||||
* attack vectors are assigned their appropriate context.
|
* string values. Only specific well known attack vectors are assigned their appropriate context.
|
||||||
*/
|
*/
|
||||||
securityContext(tagName: string, propName: string, isAttribute: boolean): SecurityContext {
|
securityContext(tagName: string, propName: string, isAttribute: boolean): SecurityContext {
|
||||||
if (isAttribute) {
|
if (isAttribute) {
|
||||||
|
|
Loading…
Reference in New Issue