Misko Hevery bb3b315eee fix(core): fix possible XSS attack in development through SSR (#40525) ...

This is a follow up fix for
https://github.com/angular/angular/pull/40136/commits/894286dd0c92b5af223364237e63798e18b14f58.

It turns out that comments can be closed in several ways:
- `<!-->`
- `<!-- -->`
- `<!-- --!>`

All of the above are valid ways to close comment per:
https://html.spec.whatwg.org/multipage/syntax.html#comments

The new fix surrounds `<` and `>` with zero width space so that it
renders in the same way, but it prevents the comment to be closed eagerly.

PR Close #40525

2021-01-22 14:19:52 -08:00

..

security

fix(core): mark Trusted Types as declarations (#39471)

2020-10-29 11:58:48 -07:00

array_utils.ts

refactor(core): Remove the need for explicit static query instruction (#40091)

2021-01-14 13:55:02 -08:00

assert.ts

fix(core): remove application from the testability registry when the root view is removed (#39876)

2020-12-02 12:56:04 -08:00

BUILD.bazel

Revert "refactor: use isObservable provided by rxjs 6.1+ (#27668)"

2019-11-27 13:00:59 -08:00

char_code.ts

refactor(core): remove unused i18n placeholder for projection (#39172)

2020-10-27 10:39:37 -07:00

closure.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

comparison.ts

refactor(core): remove looseIdentical in favor of built-in Object.is (#37191)

2020-06-01 17:19:17 -04:00

decorators.ts

docs(core): fix typo in decorators.ts relating to the use of Object.defineProperty. (#37369)

2020-06-01 17:18:08 -04:00

dom.ts

fix(core): fix possible XSS attack in development through SSR (#40525)

2021-01-22 14:19:52 -08:00

empty.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

errors.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

global.ts

refactor(core): remove custom globalThis (#40123)

2020-12-17 11:43:28 -08:00

is_dev_mode.ts

fix(core): set ngDevMode to false when calling enableProdMode() (#40124)

2020-12-16 13:20:58 -08:00

iterable.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

lang.ts

feat(common): allow any Subscribable in async pipe (#39627)

2020-11-23 08:28:11 -08:00

microtask.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

named_array_type.ts

fix(core): use Trusted Types policy in named_array_type (#39209)

2020-10-14 09:33:48 -07:00

ng_dev_mode.ts

fix(core): guard reading of global ngDevMode for undefined. (#36055)

2020-10-16 08:12:22 -07:00

ng_i18n_closure_mode.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

ng_jit_mode.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

ng_reflect.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

noop.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

property.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

raf.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

stringify.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

symbol.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00