Hopiu/angular.js
1
0
Fork 0
mirror of https://github.com/Hopiu/angular.js.git synced 2026-05-10 07:44:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix($compile): whitelist file:// in url sanitization

Browse source
This commit is contained in:
Igor Minar 2013-02-25 10:02:28 -08:00
parent 6be24df5bc
commit 6c611df8f0
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/ng/compile.js
View file

@ -156,7 +156,7 @@ function $CompileProvider($provide) {
COMMENT_DIRECTIVE_REGEXP = /^\s*directive\:\s*([\d\w\-_]+)\s+(.*)$/, COMMENT_DIRECTIVE_REGEXP = /^\s*directive\:\s*([\d\w\-_]+)\s+(.*)$/,
CLASS_DIRECTIVE_REGEXP = /(([\d\w\-_]+)(?:\:([^;]+))?;?)/, CLASS_DIRECTIVE_REGEXP = /(([\d\w\-_]+)(?:\:([^;]+))?;?)/,
MULTI_ROOT_TEMPLATE_ERROR = 'Template must have exactly one root element. was: ', MULTI_ROOT_TEMPLATE_ERROR = 'Template must have exactly one root element. was: ',
urlSanitizationWhitelist = /^\s*(https?|ftp|mailto):/; urlSanitizationWhitelist = /^\s*(https?|ftp|mailto|file):/;
/** /**

4
test/ng/compileSpec.js
View file

@ -2484,6 +2484,10 @@ describe('$compile', function() {
$rootScope.testUrl = "mailto:foo@bar.com"; $rootScope.testUrl = "mailto:foo@bar.com";
$rootScope.$apply(); $rootScope.$apply();
expect(element.attr('href')).toBe('mailto:foo@bar.com'); expect(element.attr('href')).toBe('mailto:foo@bar.com');
$rootScope.testUrl = "file:///foo/bar.html";
$rootScope.$apply();
expect(element.attr('href')).toBe('file:///foo/bar.html');
})); }));