google/safevalues issues and pull requests

#296 - Allow to pass options to `fetchResourceUrl`, so that it is more of a drop-in replacement for the native `fetch` API.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#295 - Implements a SafeHtml builder that joins SafeHtml parts with a separator.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#294 - Explicity sets the range container to the fake document's body.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#293 - Add builder option to allow custom elements in the TypeScript HTML sanitizer.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago - 1 comment

#292 - Fixes the template literal checks to work with TS5.1 transpilations.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#291 - Marks tests as skipped instead of artificially make them pass.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#290 - Fixes the template literal checks to work with TS5.1 transpilations. Disables the test coverage instrumentation, which messes with the check.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#289 - Internal change.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#288 - # Make string literal check more flexible

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#287 - Internal change.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#286 - Internal change

Pull Request - State: open - Opened by copybara-service[bot] over 1 year ago

#285 - Cleanup: Renames create<Type> to create<Type>Internal.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#284 - The license is missing the copyright section

Issue - State: closed - Opened by egel over 1 year ago - 1 comment

#283 - Allows for string parameters in htmlEscape and concatHtml.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#282 - Adds an option to set defer on scriptToHtml.

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#281 - Create a lightweight SafeHtml builder, similar to Closure's `SafeHtml.create`.

Pull Request - State: open - Opened by copybara-service[bot] over 1 year ago

#280 - Add options to safeScriptEl to allow omit setting nonces

Pull Request - State: closed - Opened by copybara-service[bot] over 1 year ago

#279 - Deletes the SafeStyle type and the linked DOM safe wrapper.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#278 - Improves code size of trustedResourceUrl builder

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#276 - # Strengthen our template literal checks

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#275 - Improves code size of trustedResourceUrl builder

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago - 1 comment

#274 - Improves code size of trustedResourceUrl builder

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#273 - Internal change

Pull Request - State: open - Opened by copybara-service[bot] almost 2 years ago

#272 - # Fix a few low-hanging fruits to optimize html sanitizer size

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#271 - Internal change

Pull Request - State: open - Opened by copybara-service[bot] almost 2 years ago

#270 - # Unify inert fragment creation with createContextualFragment

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#268 - # Fixes external CI

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#267 - # Creates a generic test utility to detect if an XSS can be triggered

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#266 - Rolls back a1d02a4407dbd60fafbc318da65c8a07b3008db5

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago - 1 comment

#265 - Export appendPathSegment in index.ts.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago - 1 comment

#264 - Rolls back a1d02a4407dbd60fafbc318da65c8a07b3008db5

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#263 - An automated rollback.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago - 1 comment

#262 - Internal change

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#261 - Renames sanitizeJavascriptUrl to sanitizeJavaScriptUrl to be more consistent with other implementations.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#260 - Adds a test case for the sanitizer with an https iframe src.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#259 - Avoid String.startsWith

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#258 - Add safeSvgEl.setAttribute.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#257 - # Removes warning about breaking changes being imminent

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#256 - allowPartAttributes?

Issue - State: closed - Opened by tushuhei almost 2 years ago - 5 comments

#255 - Updates the data: URL test vectors to capture a standard data: URL.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#254 - Internal change

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#253 - Add the ability to append a singular path to a TrustedResourceUrl using `appendPathSegment` while preserving query strings and fragments.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago - 1 comment

#252 - Release version 0.4.3

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#251 - Ensure arrow functions annotated with pure are replaced correctly

Pull Request - State: open - Opened by copybara-service[bot] almost 2 years ago

#250 - Avoid using Trusted Types in value contexts

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#249 - Stops sanitizing the #src attribute for `<img>`, `<video>`, `<audio>` and `<source>`. These sinks don't execute javascript: URLs in modern browsers anymore.

Pull Request - State: closed - Opened by copybara-service[bot] almost 2 years ago

#248 - Add a globallyAllowedAttributePrefixes argument to the HtmlSanitizer to support allowing attribute prefixes

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#247 - # Handle a few low hanging fruits in the html sanitizer code size

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#246 - Ensure sanitizer table is marked as side effect free

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#245 - Ensure calls to concat are marked as side-effects free

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#244 - # Move the DEV_MODE check to ensureTokenIsValid function

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#243 - Add builder option to allow (some) attributes with IDREF content in the TypeScript HTML sanitizer.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#242 - Internal change

Pull Request - State: open - Opened by copybara-service[bot] about 2 years ago

#241 - Changes the format of the autogenerated code for better optimizations

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#240 - An automated rollback.

Pull Request - State: open - Opened by copybara-service[bot] about 2 years ago

#239 - Moves the docs folder to the root of the repository. This is a convention for Github to pick files like "contributing.md".

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#238 - Fixes the documentation for svg_use#setHref.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#237 - Add doc about common XSS sinks that cause Trusted Types violations and how to remediate them.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#236 - Fixes a typo in the documentation.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#235 - Introduce safe setter for base.href

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#234 - Adds documentation for the sanitizer.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#233 - Remove unused code.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#232 - Use \uXXXX instead of \xXX for better compatibility with JSON

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago - 1 comment

#231 - Transform possibly `null`s and `undefined` unsafe strings in the equivalent string form to maintain behavior equivalence with closure legacyconversion.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago - 1 comment

#230 - Internal change

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#229 - Improves the ES module packaging.

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago

#228 - fix: allow consumption of ESM version of package

Pull Request - State: closed - Opened by copybara-service[bot] about 2 years ago - 1 comment

#227 - fix: allow consumption of ESM version of package

Pull Request - State: closed - Opened by alan-agius4 about 2 years ago - 5 comments