6 commits

Author	SHA1	Message	Date
Elliott Sprehn	6bb2cd6ee2	Provide browser DSL with location() to expect the iframe URL parts. Also move navigateTo() under the browser DSL.	2010-11-01 15:21:37 -07:00
Misko Hevery	9c6794a044	start new release 0.9.2 faunal-mimicry	2010-10-26 22:48:34 -07:00
Igor Minar	ec885489a2	updating CHANGELOG.md for the 0.9.1 release	2010-10-26 22:17:37 -07:00
Misko Hevery	4fdab37659	create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. ... Sanitization works in two phases: 1) We parse the HTML into sax-like events (start, end, chars). HTML parsing is very complex, and so it may very well be that what most browser consider valid HTML may not pares properly here, but we do best effort. We treat this parser as untrusted. 2) We have safe sanitizeWriter which treats its input (start, end, chars) as untrusted content and escapes everything. It only allows elements in the whitelist and only allows attributes which are whitelisted. Any attribute value must not start with 'javascript:'. This check is performed after escaping for entity (&xAB; etc..) and ignoring any whitespace. - Correct linky filter to use safeHtmlWriter - Correct html filter to use safeHtmlWriter Close #33; Close #34	2010-10-26 13:41:07 -07:00
Igor Minar	833e0ae343	$cookieStore should not be a global service ... you must use $inject to $inject it as any other non-global service	2010-10-23 14:22:30 -07:00
Igor Minar	68f074c299	adding CHANGELOG.md with 0.9.0 release notes	2010-10-20 17:00:36 -07:00