Misko Hevery ba8da742e3 fix(core): fix possible XSS attack in development through SSR (#40525) ...

This is a follow up fix for
https://github.com/angular/angular/pull/40136/commits/894286dd0c92b5af223364237e63798e18b14f58.

It turns out that comments can be closed in several ways:
- `<!-->`
- `<!-- -->`
- `<!-- --!>`

All of the above are valid ways to close comment per:
https://html.spec.whatwg.org/multipage/syntax.html#comments

The new fix surrounds `<` and `>` with zero width space so that it
renders in the same way, but it prevents the comment to be closed eagerly.

PR Close #40525

2021-03-18 10:06:02 -07:00

..

global

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

schematics

feat(compiler-cli): add support for TypeScript 4.0 (#38076)

2020-08-24 13:06:59 -07:00

src

fix(core): fix possible XSS attack in development through SSR (#40525)

2021-03-18 10:06:02 -07:00

test

fix(core): fix possible XSS attack in development through SSR (#40525)

2021-03-18 10:06:02 -07:00

testing

fix(core): reset tView between tests in Ivy TestBed (#38659)

2020-09-03 09:44:22 -07:00

BUILD.bazel

fix(core): disable tsickle pass when producing APF packages (#37221)

2020-05-21 09:14:47 -07:00

index.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00

package.json

Revert "build: remove wombot proxy registry from package.jsons for release (#37378)" (#37495)

2020-06-10 08:21:45 -07:00

PACKAGE.md

docs: add package doc files (#26047)

2018-10-05 15:42:14 -07:00

public_api.ts

build: update license headers to reference Google LLC (#37205)

2020-05-26 14:26:58 -04:00