angular-docs-cn/packages/core/test/sanitization
Igor Minar 55748dbc55 fix(core): allow css custom variables/properties in the style sanitizer (#33841)
This change enables "var(--my-var)" to pass through the style sanitizer.

After consulation with our security team, allowing these doesn't create
new attack vectors, so the sanitizer doesn't need to strip them.

Fixes parts of #23485 related to the sanitizer, other use cases discussed
there related to binding have been addressed via other changes to the
class and style handling in the runtime.

Closes #23485

PR Close #33841
2019-11-20 14:47:59 -08:00
..
html_sanitizer_spec.ts feat(core): add missing ARIA attributes to html sanitizer (#29685) 2019-04-25 12:30:55 -07:00
sanitization_spec.ts test: rename mispelled `sanitization_spec.ts` file (#33712) 2019-11-11 14:01:04 -08:00
style_sanitizer_spec.ts fix(core): allow css custom variables/properties in the style sanitizer (#33841) 2019-11-20 14:47:59 -08:00
url_sanitizer_spec.ts feat(ivy): provide sanitization methods which can be tree shaken (#22540) 2018-03-07 18:24:07 -08:00