Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / google/safevalues issues and pull requests

#388 - Bump the npm_and_yarn group across 1 directory with 8 updates

Pull Request - State: open - Opened by dependabot[bot] 13 days ago
Labels: dependencies

#387 - Bump the npm_and_yarn group across 1 directory with 6 updates

Pull Request - State: closed - Opened by dependabot[bot] 14 days ago - 1 comment
Labels: dependencies

#386 - Add aria-describedby to permitted list of attributes with IDENTIFIER contract.

Pull Request - State: closed - Opened by copybara-service[bot] 18 days ago - 1 comment

#385 - ESM Resolution failing

Issue - State: open - Opened by dlarocque 21 days ago - 2 comments

#384 - Remove IE 10 and 11 specific test cases from html_sanitizer_test.ts.

Pull Request - State: closed - Opened by copybara-service[bot] about 1 month ago

#383 - Prepare the HTML sanitizer to accept a CSS sanitizer

Pull Request - State: closed - Opened by copybara-service[bot] about 1 month ago

#382 - Dead link in README.md

Issue - State: open - Opened by dlarocque about 1 month ago

#381 - No public description

Pull Request - State: open - Opened by copybara-service[bot] about 1 month ago

#380 - Remove IE-specific code from the HTML sanitizer.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 months ago

#379 - Add srcset attribute to allowlist for img and source elements.

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago - 1 comment

#378 - Fix all the lint errors

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#377 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#376 - Adds instanceof tests for internals

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#375 - Remove last remaining clang-format pragmas that are now unnecessary

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#374 - Reformat all remaining files using prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#373 - Migrate internals to format with prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#372 - Migrate builders to format with prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#371 - Moves safevalues/dom code to format using prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#370 - Preserve internal implementation of `pure` to simplify code transform with OSS

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#369 - Migrates formatting of html_sanitizer folders to prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#368 - Migrates formatting of testing utilities to prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#367 - Remove IE-specific code in unit_tests

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#366 - Changes code formatting to use prettier

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#365 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 3 months ago

#364 - Reorganize the code in preparation for reducing the code size of dom setters

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#363 - Run unit tests with latest node version

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#361 - # Changes the javascript url regex to save a few extra bytes

Pull Request - State: closed - Opened by copybara-service[bot] 3 months ago

#360 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 3 months ago

#359 - Bump follow-redirects from 1.15.1 to 1.15.6

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies

#358 - Fix a typo in comments explaining the purpose of the isTemplateObject function.

Pull Request - State: closed - Opened by copybara-service[bot] 4 months ago

#357 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 4 months ago

#356 - Add the option to include `crossorigin="anonymous"` attribute (https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/crossorigin#anonymous) to the script tag

Pull Request - State: closed - Opened by copybara-service[bot] 4 months ago - 1 comment

#355 - Makes `sanitizeAssertUnchanged` throw only in DEV_MODE.

Pull Request - State: closed - Opened by copybara-service[bot] 4 months ago

#354 - Add a note that the KEEP_AND_SANITIZE_STYLE is currently equivalent to KEEP.

Pull Request - State: closed - Opened by copybara-service[bot] 4 months ago

#353 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago - 1 comment

#352 - Fix the justification arg of reviewed conversion in integration tests

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#351 - # Changes htmlToNode to unwrap the Document fragment when there is a single node.

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#350 - Use a regex to detect `javascript:` URLs. This is more efficient in terms of code size, and more supported (e.g. the URL constructor API not avaible in legacy browsers).

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#349 - Adds functionality to convert SafeHtml to DOM Nodes (htmlToNode) and the other way round (nodeToHtml)

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#348 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 5 months ago

#347 - Fix casing for URL.revokeObjectURL() in comment

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago - 1 comment

#346 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#345 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago - 1 comment

#344 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 5 months ago

#343 - Automated Code Change

Pull Request - State: closed - Opened by copybara-service[bot] 6 months ago

#342 - Remove the safeFragment API that has been replaced by htmlFragment.

Pull Request - State: closed - Opened by copybara-service[bot] 6 months ago

#341 - Bump follow-redirects from 1.15.1 to 1.15.4

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies

#340 - Add 'modulepreload' for link 'rel' attribute values enum.

Pull Request - State: closed - Opened by copybara-service[bot] 6 months ago - 1 comment

#339 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 6 months ago - 1 comment

#338 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 6 months ago - 1 comment

#337 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 6 months ago

#336 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 6 months ago

#335 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 6 months ago

#334 - Change the justification API shape to prevent swapping arguments by mistake.

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#333 - This CL renames safeFragment to htmlFragment and adds a new svgFragment API to build a DocumentFragment object from a constant literal string in an svg context.

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#332 - Internal Code Change

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#331 - No public description

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#330 - Internal changes

Pull Request - State: open - Opened by copybara-service[bot] 7 months ago

#329 - Make it possible to set more attributes with `scriptUrlToHtml`.

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#328 - # Port safeScriptWithArgs' comment feature over to safeScript

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#327 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 7 months ago

#326 - Exports `getStyleNonce` on `safeWindow`.

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#325 - Exports `getScriptNonce` on `safeWindow`.

Pull Request - State: closed - Opened by copybara-service[bot] 7 months ago

#324 - Update `appendParams` to support URLs with hash fragments.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago - 1 comment

#323 - Defines a SafeHtml builder for `<!DOCTYPE html>`.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago

#322 - This CL adds a new safeFragment API to build a DocumentFragment object from a constant literal string.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago - 1 comment

#321 - Bump browserify-sign from 4.2.1 to 4.2.2

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies

#320 - Exports the `toAbsoluteResourceUrl` function.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago - 1 comment

#319 - Internal change.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago

#318 - Always call `createElement` on inert document to avoid unexpected subresource loads

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago

#317 - Fix the relative URL regex to block spaces.

Pull Request - State: closed - Opened by copybara-service[bot] 8 months ago

#316 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 8 months ago

#315 - Bump @babel/traverse from 7.18.11 to 7.23.2

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies

#314 - Adds a `toAbsoluteResourceUrl` method to the builder functions.

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago - 1 comment

#313 - Add support for case sensitive attributes in `safeSvgEl.setAttribute`

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago - 1 comment

#312 - Allows for relative paths in trustedResourceUrl template builder.

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago

#311 - Bumps safevalues version number to v0.5.2.

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago

#310 - Wraps Trusted Types in a Safe Type object implementation.

Pull Request - State: open - Opened by copybara-service[bot] 9 months ago

#309 - This CL updates `window` detection logic to compare the `typeof` result with `'undefined'` (string), not `undefined` (primitive).

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago - 1 comment

#308 - Add acronym, basefont, big, dir, hgroup, strike, tt to the list of allowed tags.

Pull Request - State: closed - Opened by copybara-service[bot] 9 months ago - 1 comment

#307 - Forces the stringification of values passed to htmlEscape.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#306 - No public description

Pull Request - State: open - Opened by copybara-service[bot] 10 months ago

#305 - Export `safeStyleRule` builder from safevalues

Pull Request - State: open - Opened by copybara-service[bot] 10 months ago

#304 - Targets ES2015 for the safevalues ES module to be easier to ingest by other tools like unpkg.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#303 - Restores the `prepack` step in package.json.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#302 - Bump ua-parser-js from 0.7.31 to 0.7.35

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#301 - Bump json5 from 2.2.1 to 2.2.3

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#300 - Bump semver from 6.3.0 to 6.3.1

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies

#299 - Updates how safevalues is packaged.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#298 - Don't use ES6 features to minimize polyfill cost.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#297 - # Allows `>` in the safeStyleSheet builder

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#296 - Allow to pass options to `fetchResourceUrl`, so that it is more of a drop-in replacement for the native `fetch` API.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#295 - Implements a SafeHtml builder that joins SafeHtml parts with a separator.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#294 - Explicity sets the range container to the fake document's body.

Pull Request - State: closed - Opened by copybara-service[bot] 10 months ago

#293 - Add builder option to allow custom elements in the TypeScript HTML sanitizer.

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago - 1 comment

#292 - Fixes the template literal checks to work with TS5.1 transpilations.

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago

#291 - Marks tests as skipped instead of artificially make them pass.

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago

#290 - Fixes the template literal checks to work with TS5.1 transpilations. Disables the test coverage instrumentation, which messes with the check.

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago

#289 - Internal change.

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago

#288 - # Make string literal check more flexible

Pull Request - State: closed - Opened by copybara-service[bot] 11 months ago