@angular-wave/angular.ts 0.9.4 → 0.9.6

package/docs/content/docs/service/sce.md

@@ -1,194 +0,0 @@
----
-title: $sce
-description: >
-  Strict Contextual Escaping service
----
-
-# `$sceProvider` and `$sce` Documentation
-
-## `$sceProvider`
-
-The `$sceProvider` provider allows developers to configure the [`$sce`](#sce)
-service.
-
-- Enable/disable Strict Contextual Escaping (SCE) in a module
-- Override the default implementation with a custom delegate
-
-Read more about [Strict Contextual Escaping (SCE)](#strict-contextual-escaping).
-
----
-
-## `$sce`
-
-`$sce` is a service that provides **Strict Contextual Escaping (SCE)** services
-to AngularTS.
-
----
-
-## Strict Contextual Escaping
-
-### Overview
-
-Strict Contextual Escaping (SCE) is a mode in which AngularTS constrains
-bindings to only render trusted values. Its goal is to:
-
-- Help you write **secure-by-default** code.
-- Simplify **auditing for vulnerabilities** such as XSS and clickjacking.
-
-By default, AngularTS treats **all values as untrusted** in HTML or sensitive
-URL bindings. When binding untrusted values, AngularTS will:
-
-- Sanitize or validate them based on context.
-- Or throw an error if it cannot guarantee safety.
-
-Example — `ng-bind-html` renders its value directly as HTML (its “context”). If
-the input is untrusted, AngularTS will sanitize or reject it.
-
-To bypass sanitization, you must mark a value as trusted before binding it.
-
-> **Note:** Since version 1.2, AngularTS ships with SCE **enabled by default**.
-
----
-
-### Example: Binding in a Privileged Context
-
-```html
-<input ng-model="userHtml" aria-label="User input" />
-<div ng-bind-html="userHtml"></div>
-```
-
-If SCE is disabled, this allows arbitrary HTML injection — a serious XSS risk.
-
-To safely render user content, you should sanitize the HTML (on the server or
-client) **before** binding it.
-
-SCE ensures that only trusted, validated, or sanitized values are rendered.
-
-You can mark trusted values explicitly using:
-
-```js
-$sce.trustAs(context, value);
-```
-
-or shorthand methods such as:
-
-```js
-$sce.trustAsHtml(value);
-$sce.trustAsUrl(value);
-$sce.trustAsResourceUrl(value);
-```
-
----
-
-### How It Works
-
-Directives and Angular internals bind trusted values using:
-
-```js
-$sce.getTrusted(context, value);
-```
-
-Example: the `ngBindHtml` directive uses `$sce.parseAsHtml` internally:
-
-```js
-let ngBindHtmlDirective = [
-  '$sce',
-  function ($sce) {
-    return function (scope, element, attr) {
-      scope.$watch($sce.parseAsHtml(attr.ngBindHtml), function (value) {
-        element.html(value || '');
-      });
-    };
-  },
-];
-```
-
----
-
-### Impact on Loading Templates
-
-SCE affects both:
-
-- The [`ng-include`](https://docs.angularjs.org/api/ng/directive/ngInclude)
-  directive
-- The `templateUrl` property in directives
-
-By default, AngularTS loads templates **only** from the same domain and protocol
-as the main document.  
-It uses:
-
-```js
-$sce.getTrustedResourceUrl(url);
-```
-
-To allow templates from other domains, use:
-
-- `$sceDelegateProvider.trustedResourceUrlList`
-- Or `$sce.trustAsResourceUrl(url)`
-
-> **Note:** Browser CORS and Same-Origin policies still apply.
-
----
-
-### Is This Too Much Overhead?
-
-SCE applies only to **interpolation expressions**.
-
-Constant literals are automatically trusted, e.g.:
-
-```html
-<div ng-bind-html="'<b>implicitly trusted</b>'"></div>
-```
-
-If the `ngSanitize` module is included, `$sceDelegate` will use `$sanitize` to
-clean untrusted HTML automatically.
-
-AngularTS’ default `$sceDelegate` allows loading from your app’s domain,
-blocking others unless explicitly whitelisted.
-
-This small overhead provides major security benefits and simplifies auditing.
-
----
-
-### Supported Trusted Contexts
-
-| Context             | Description                                                |
-| ------------------- | ---------------------------------------------------------- |
-| `$sce.HTML`         | Safe HTML (used by `ng-bind-html`).                        |
-| `$sce.CSS`          | Safe CSS. Currently unused.                                |
-| `$sce.MEDIA_URL`    | Safe media URLs (auto-sanitized).                          |
-| `$sce.URL`          | Safe navigable URLs.                                       |
-| `$sce.RESOURCE_URL` | Safe resource URLs (used in `ng-include`, `iframe`, etc.). |
-| `$sce.JS`           | Safe JavaScript for execution.                             |
-
-> ⚠️ Before AngularTS 1.7.0, `a[href]` and `img[src]` sanitized directly.  
-> As of 1.7.0, these now use `$sce.URL` and `$sce.MEDIA_URL` respectively.
-
----
-
-### Resource URL List Patterns
-
-Trusted and banned resource URL lists accept:
-
-- `'self'` → matches same domain & protocol
-- Strings with wildcards:
-  - `*` → matches within a single path segment
-  - `**` → matches across path segments (use carefully)
-- Regular expressions (`RegExp`)
-
-> **Caution:** Regex patterns are powerful but harder to maintain — use only
-> when necessary.
-
----
-
-### Disabling SCE (Not Recommended)
-
-You can disable SCE globally — though this is strongly discouraged.
-
-```js
-angular.module('myAppWithSceDisabled', []).config(function ($sceProvider) {
-  // Completely disable SCE. For demonstration purposes only!
-  // Do not use in new projects or libraries.
-  $sceProvider.enabled(false);
-});
-```

package/docs/content/docs/service/templateCache.md

@@ -1,64 +0,0 @@
----
-title: $templateCache
-description: >
-  Map object for storing templates
----
-
-`$templateCache` is a
-[Map](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Map)
-object created by `$templateCacheProvider`.
-
-The first time a template is used, it is loaded in the template cache for quick
-retrieval. You can load templates directly into the cache in a script tag by
-using $templateRequest or by consuming the $templateCache service directly.
-
-Adding via the script tag:
-
-#### Example
-
-```html
-<script type="text/ng-template" id="templateId.html">
-  <p>This is the content of the template</p>
-</script>
-```
-
-Note: the script tag containing the template does not need to be included in the
-head of the document, but it must be a descendent of the $rootElement (e.g.
-element with `ng-app` attribute), otherwise the template will be ignored.
-
-Adding via the `$templateCache` service:
-
-#### Example
-
-```js
-const myApp = angular.module('myApp', []).run(($templateCache) => {
-  $templateCache.set('templateId.html', 'This is the content of the template');
-});
-```
-
-To retrieve the template, simply use it in your component:
-
-```js
-myApp.component('myComponent', {
-  templateUrl: 'templateId.html',
-});
-```
-
-or include it with `ng-include`:
-
-```html
-<div ng-include="'templateId.html`"></div>
-```
-
-or get it via the `$templateCache` service:
-
-```js
-myApp.controller(
-  'Test',
-  class {
-    constructor($templateCache) {
-      const tmp = $templateCache.get('templateId.html');
-    }
-  },
-);
-```

package/docs/content/docs/service/templateRequest.md

@@ -1,5 +0,0 @@
----
-title: $templateRequest
-description: >
-  Template request service
----

package/docs/content/docs/service/url.md

@@ -1,5 +0,0 @@
----
-title: $url
-description: >
-  URL management for state transitions
----

package/docs/content/docs/values/_index.md

@@ -1,4 +0,0 @@
----
-title: Values
-weight: 60
----

package/docs/content/docs/values/document.md

@@ -1,29 +0,0 @@
----
-title: $document
-description: >
-  Injectable `window.document` object
----
-
-### Description
-
-An injectable wrapper for `window.document`
-[object ](https://developer.mozilla.org/en-US/docs/Web/API/Document). Useful for
-mocking a browser dependency in non-browser environment tests:
-
-**Example:**
-
-```js
-// value injectables are overriden
-angular.module('demo', []).value('$document', {});
-```
-
-The wrapper also make accessible `window.document` directly in template scope
-via `ng-inject` directive.
-
-#### Demo
-
-{{< showhtml src="examples/document/document.html" >}}
-
-{{< showraw src="examples/document/document.html" >}}
-
----

package/docs/content/docs/values/window.md

@@ -1,29 +0,0 @@
----
-title: $window
-description: >
-  Injectable `window` object
----
-
-### Description
-
-An injectable wrapper for `window`
-[object ](https://developer.mozilla.org/en-US/docs/Web/API/Window). Useful for
-mocking a browser dependency in non-browser environment tests:
-
-**Example:**
-
-```js
-// value injectables are overriden
-angular.module('demo', []).value('$window', {});
-```
-
-The wrapper also make accessible `window` directly in template scope via
-`ng-inject` directive.
-
-#### Demo
-
-{{< showhtml src="examples/window/window.html" >}}
-
-{{< showraw src="examples/window/window.html" >}}
-
----

package/docs/docker-compose.yaml

@@ -1,12 +0,0 @@
-version: '3.8'
-
-services:
-  site:
-    image: docsy/docsy-example
-    build:
-      context: .
-    command: server
-    ports:
-      - '1313:1313'
-    volumes:
-      - .:/src

package/docs/docsy.work

@@ -1,5 +0,0 @@
-go 1.19
-
-use .
-use ../docsy/   // Local docsy clone resides in sibling folder to this project
-// use ./themes/docsy/           // Local docsy clone resides in themes folder

package/docs/go.mod

@@ -1,5 +0,0 @@
-module github.com/google/docsy-example
-
-go 1.12
-
-require github.com/google/docsy v0.12.0

package/docs/go.sum

@@ -1,6 +0,0 @@
-github.com/FortAwesome/Font-Awesome v0.0.0-20241216213156-af620534bfc3 h1:/iluJkJiyTAdnqrw3Yi9rH2HNHhrrtCmj8VJe7I6o3w=
-github.com/FortAwesome/Font-Awesome v0.0.0-20241216213156-af620534bfc3/go.mod h1:IUgezN/MFpCDIlFezw3L8j83oeiIuYoj28Miwr/KUYo=
-github.com/google/docsy v0.12.0 h1:CddZKL39YyJzawr8GTVaakvcUTCJRAAYdz7W0qfZ2P4=
-github.com/google/docsy v0.12.0/go.mod h1:1bioDqA493neyFesaTvQ9reV0V2vYy+xUAnlnz7+miM=
-github.com/twbs/bootstrap v5.3.6+incompatible h1:efmXVyq839m5QQ0+JBUdQQ1TrmoBqvQ5kRhUueKsH+4=
-github.com/twbs/bootstrap v5.3.6+incompatible/go.mod h1:fZTSrkpSf0/HkL0IIJzvVspTt1r9zuf7XlZau8kpcY0=

package/docs/hugo-disabled.toml

@@ -1,220 +0,0 @@
-baseURL = "https://example.docsy.dev/"
-title = "AngularTS"
-
-# Language settings
-contentDir = "content/en"
-defaultContentLanguage = "en"
-defaultContentLanguageInSubdir = false
-# Useful when translating.
-enableMissingTranslationPlaceholders = true
-
-enableRobotsTXT = true
-
-# Will give values to .Lastmod etc.
-enableGitInfo = true
-
-# Comment out to disable taxonomies in Docsy
-# disableKinds = ["taxonomy"]
-
-# You can add your own taxonomies
-[taxonomies]
-tag = "tags"
-category = "categories"
-
-[params.taxonomy]
-# set taxonomyCloud = [] to hide taxonomy clouds
-taxonomyCloud = ["tags", "categories"]
-
-# If used, must have same length as taxonomyCloud
-taxonomyCloudTitle = ["Tag Cloud", "Categories"]
-
-# set taxonomyPageHeader = [] to hide taxonomies on the page headers
-taxonomyPageHeader = ["tags", "categories"]
-
-# Highlighting config
-pygmentsCodeFences = true
-pygmentsUseClasses = false
-# Use the new Chroma Go highlighter in Hugo.
-pygmentsUseClassic = false
-#pygmentsOptions = "linenos=table"
-# See https://help.farbox.com/pygments.html
-pygmentsStyle = "tango"
-
-# Configure how URLs look like per section.
-[permalinks]
-blog = "/:section/:year/:month/:day/:slug/"
-
-# Image processing configuration.
-[imaging]
-resampleFilter = "CatmullRom"
-quality = 75
-anchor = "smart"
-
-# Language configuration
-
-[languages]
-[languages.en]
-languageName ="English"
-title = "AngularTS"
-[languages.en.params]
-description = "A Docsy example site"
-
-[languages.no]
-languageName ="Norsk"
-contentDir = "content/no"
-title = "Gulldoks"
-[languages.no.params]
-description = "Docsy er operativsystem for skyen"
-time_format_default = "02.01.2006"
-time_format_blog = "02.01.2006"
-
-[languages.fa]
-languageDirection = "rtl"
-languageName ="فارسی"
-contentDir = "content/fa"
-title = "اسناد گلدی"
-[languages.fa.params]
-description = "یک نمونه برای پوسته داکسی"
-time_format_default = "2006.01.02"
-time_format_blog = "2006.01.02"
-
-[markup]
-  [markup.goldmark]
-    [markup.goldmark.parser.attribute]
-      block = true
-    [markup.goldmark.renderer]
-      unsafe = true
-  [markup.highlight]
-    # See a complete list of available styles at https://xyproto.github.io/splash/docs/all.html
-    style = "tango"
-    # Uncomment if you want your chosen highlight style used for code blocks without a specified language
-    # guessSyntax = "true"
-
-# Comment out if you don't want the "print entire section" link enabled.
-[outputs]
-section = ["HTML", "print", "RSS"]
-
-# Everything below this are Site Params
-
-[params]
-privacy_policy = "https://policies.google.com/privacy"
-
-# First one is picked as the Twitter card image if not set on page.
-# images = ["images/project-illustration.png"]
-
-# Menu title if your navbar has a versions selector to access old versions of your site.
-# This menu appears only if you have at least one [params.versions] set.
-version_menu = "Releases"
-
-# Flag used in the "version-banner" partial to decide whether to display a
-# banner on every page indicating that this is an archived version of the docs.
-# Set this flag to "true" if you want to display the banner.
-archived_version = false
-
-# The version number for the version of the docs represented in this doc set.
-# Used in the "version-banner" partial to display a version number for the
-# current doc set.
-version = "0.7.1"
-
-# A link to latest version of the docs. Used in the "version-banner" partial to
-# point people to the main doc site.
-url_latest_version = "https://example.com"
-
-# Repository configuration (URLs for in-page links to opening issues and suggesting changes)
-github_repo = "https://github.com/google/docsy-example"
-# An optional link to a related project repo. For example, the sibling repository where your product code lives.
-github_project_repo = "https://github.com/google/docsy"
-
-# Specify a value here if your content directory is not in your repo's root directory
-# github_subdir = ""
-
-# Uncomment this if your GitHub repo does not have "main" as the default branch,
-# or specify a new value if you want to reference another branch in your GitHub links
-github_branch= "main"
-
-# Google Custom Search Engine ID. Remove or comment out to disable search.
-gcs_engine_id = "d72aa9b2712488cc3"
-
-# Enable Lunr.js offline search
-offlineSearch = false
-
-# Enable syntax highlighting and copy buttons on code blocks with Prism
-prism_syntax_highlighting = false
-
-[params.copyright]
-  authors = "Docsy Authors | [CC BY 4.0](https://creativecommons.org/licenses/by/4.0) | "
-  from_year = 2018
-
-# User interface configuration
-[params.ui]
-#  Set to true to disable breadcrumb navigation.
-breadcrumb_disable = false
-# Set to false if you don't want to display a logo (/assets/icons/logo.svg) in the top navbar
-navbar_logo = true
-# Set to true if you don't want the top navbar to be translucent when over a `block/cover`, like on the homepage.
-navbar_translucent_over_cover_disable = false
-# Enable to show the side bar menu in its compact state.
-sidebar_menu_compact = false
-# Set to true to hide the sidebar search box (the top nav search box will still be displayed if search is enabled)
-sidebar_search_disable = false
-
-# Adds a H2 section titled "Feedback" to the bottom of each doc. The responses are sent to Google Analytics as events.
-# This feature depends on [services.googleAnalytics] and will be disabled if "services.googleAnalytics.id" is not set.
-# If you want this feature, but occasionally need to remove the "Feedback" section from a single page,
-# add "hide_feedback: true" to the page's front matter.
-[params.ui.feedback]
-enable = true
-# The responses that the user sees after clicking "yes" (the page was helpful) or "no" (the page was not helpful).
-yes = 'Glad to hear it! Please <a href="https://github.com/USERNAME/REPOSITORY/issues/new">tell us how we can improve</a>.'
-no = 'Sorry to hear that. Please <a href="https://github.com/USERNAME/REPOSITORY/issues/new">tell us how we can improve</a>.'
-
-# Adds a reading time to the top of each doc.
-# If you want this feature, but occasionally need to remove the Reading time from a single page,
-# add "hide_readingtime: true" to the page's front matter
-[params.ui.readingtime]
-enable = false
-
-[params.links]
-# End user relevant links. These will show up on left side of footer and in the community page if you have one.
-[[params.links.user]]
-  name = "User mailing list"
-  url = "https://example.org/mail"
-  icon = "fa fa-envelope"
-  desc = "Discussion and help from your fellow users"
-[[params.links.user]]
-  name ="Twitter"
-  url = "https://example.org/twitter"
-  icon = "fab fa-twitter"
-  desc = "Follow us on Twitter to get the latest news!"
-[[params.links.user]]
-  name = "Stack Overflow"
-  url = "https://example.org/stack"
-  icon = "fab fa-stack-overflow"
-  desc = "Practical questions and curated answers"
-# Developer relevant links. These will show up on right side of footer and in the community page if you have one.
-[[params.links.developer]]
-  name = "GitHub"
-  url = "https://github.com/google/docsy"
-  icon = "fab fa-github"
-  desc = "Development takes place here!"
-[[params.links.developer]]
-  name = "Slack"
-  url = "https://example.org/slack"
-  icon = "fab fa-slack"
-  desc = "Chat with other project developers"
-[[params.links.developer]]
-  name = "Developer mailing list"
-  url = "https://example.org/mail"
-  icon = "fa fa-envelope"
-  desc = "Discuss development issues around the project"
-
-# hugo module configuration
-[module]
-  # Uncomment the next line to build and serve using local docsy clone declared in the named Hugo workspace:
-  # workspace = "docsy.work"
-  [module.hugoVersion]
-    extended = true
-    min = "0.146.0"
-  [[module.imports]]
-    path = "github.com/google/docsy"
-    disable = false