mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
47b71d98ae
Both Firefox and Safari are vulnerable to XSS if we use an inert document created via `document.implementation.createHTMLDocument()`. Now we check for those vulnerabilities and then use a DOMParser or XHR strategy if needed. Further the platform-server has its own library for parsing HTML, so we sniff for that (by checking whether DOMParser exists) and fall back to the standard strategy. Thanks to @cure53 for the heads up on this issue. PR Close #17019
19 lines
272 B
JSON
19 lines
272 B
JSON
{
|
|
"cli-hello-world": {
|
|
"master": {
|
|
"uncompressed": {
|
|
"inline": 1447,
|
|
"main": 154185,
|
|
"polyfills": 59179
|
|
}
|
|
}
|
|
},
|
|
"hello_world__closure": {
|
|
"master": {
|
|
"uncompressed": {
|
|
"bundle": 101744
|
|
}
|
|
}
|
|
}
|
|
}
|