No description
Find a file
Misko Hevery 4fdab37659 create HTML sanitizer to allow inclusion of untrusted HTML in safe manner.
Sanitization works in two phases:
 1) We parse the HTML into sax-like events (start, end, chars).
    HTML parsing is very complex, and so it may very well be that what
    most browser consider valid HTML may not pares properly here,
    but we do best effort. We treat this parser as untrusted.
 2) We have safe sanitizeWriter which treats its input (start, end, chars)
    as untrusted content and escapes everything. It only allows elements
    in the whitelist and only allows attributes which are whitelisted.
    Any attribute value must not start with 'javascript:'. This check
    is performed after escaping for entity (&xAB; etc..) and ignoring
    any whitespace.

 - Correct linky filter to use safeHtmlWriter
 - Correct html filter to use safeHtmlWriter

Close #33; Close #34
2010-10-26 13:41:07 -07:00
.externalToolBuilders fixed lint warnings and one flaky test 2010-10-15 13:44:53 -07:00
.idea twitter using resources 2010-03-16 14:38:56 -07:00
.settings clean up, fixes for app 2010-04-07 10:17:15 -07:00
css Lots of stability and performance updates and UI polish too. 2010-10-20 14:38:00 -07:00
example improving the PersonalLog app 2010-10-23 16:25:53 -07:00
images inline all images into css 2010-10-18 16:24:43 -07:00
lib create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. 2010-10-26 13:41:07 -07:00
regression Fix for getting into recursive $eval on scope. Close #59 2010-10-23 13:42:11 -07:00
scenario fix some of the failing ie tests 2010-10-20 23:17:59 -07:00
src create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. 2010-10-26 13:41:07 -07:00
test create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. 2010-10-26 13:41:07 -07:00
.gitignore Workaround for http://bugs.jquery.com/ticket/7292 2010-10-22 22:46:51 -07:00
.project created a way to init the code without autobootstrap 2010-01-08 16:04:35 -08:00
angularjs.ftp add ftp script to auto deploy to angularjs.org 2010-08-14 11:03:36 -07:00
CHANGELOG.md create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. 2010-10-26 13:41:07 -07:00
java ng:repeat ignores prototype keys 2010-07-09 14:45:29 -07:00
jsTestDriver-jquery.conf Workaround for http://bugs.jquery.com/ticket/7292 2010-10-22 22:46:51 -07:00
jsTestDriver.conf personalLog demo - initial version with spec 2010-10-23 14:38:08 -07:00
LICENSE MIT license 2010-01-05 16:57:36 -08:00
nodeserver.sh Fix issue where directories don't have a slash on the end and allow specifying a different port 2010-10-23 14:22:54 -07:00
Rakefile create HTML sanitizer to allow inclusion of untrusted HTML in safe manner. 2010-10-26 13:41:07 -07:00
README.md readme 2010-03-15 14:41:28 -07:00
server.sh Workaround for http://bugs.jquery.com/ticket/7292 2010-10-22 22:46:51 -07:00
test.sh fixed tests 2010-10-19 16:14:16 -07:00
version.yaml preparing 0.9.1 repulsion-field iteration 2010-10-20 15:52:55 -07:00

Angular

Compiling

rake compile

Running Tests

rake server:start
rake test