@angular/platform-browser 0.0.0-6 → 2.0.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (546) hide show
  1. package/bundles/platform-browser.umd.js +4685 -0
  2. package/bundles/platform-browser.umd.min.js +4 -0
  3. package/core_private.d.ts +27 -1
  4. package/core_private.js +16 -0
  5. package/core_private.js.map +1 -1
  6. package/core_private.metadata.json +1 -1
  7. package/esm/core_private.d.ts +27 -1
  8. package/esm/core_private.js +16 -0
  9. package/esm/core_private.js.map +1 -1
  10. package/esm/core_private.metadata.json +1 -1
  11. package/esm/index.d.ts +22 -1
  12. package/esm/index.js +25 -1
  13. package/esm/index.js.map +1 -1
  14. package/esm/index.metadata.json +1 -0
  15. package/esm/private_export.d.ts +21 -21
  16. package/esm/private_export.js +11 -21
  17. package/esm/private_export.js.map +1 -1
  18. package/esm/private_export.metadata.json +1 -0
  19. package/esm/src/browser/browser_adapter.d.ts +6 -0
  20. package/esm/src/browser/browser_adapter.js +146 -76
  21. package/esm/src/browser/browser_adapter.js.map +1 -1
  22. package/esm/src/browser/generic_browser_adapter.js +4 -4
  23. package/esm/src/browser/generic_browser_adapter.js.map +1 -1
  24. package/esm/src/browser/location/browser_platform_location.d.ts +1 -5
  25. package/esm/src/browser/location/browser_platform_location.js +16 -3
  26. package/esm/src/browser/location/browser_platform_location.js.map +1 -1
  27. package/esm/src/browser/location/browser_platform_location.metadata.json +1 -1
  28. package/esm/src/browser/location/history.d.ts +1 -0
  29. package/esm/src/browser/location/history.js +4 -0
  30. package/esm/src/browser/location/history.js.map +1 -0
  31. package/esm/src/browser/location/history.metadata.json +1 -0
  32. package/esm/src/browser/testability.d.ts +1 -1
  33. package/esm/src/browser/testability.js +7 -5
  34. package/esm/src/browser/testability.js.map +1 -1
  35. package/esm/src/browser/title.d.ts +2 -0
  36. package/esm/src/browser/title.js +2 -0
  37. package/esm/src/browser/title.js.map +1 -1
  38. package/esm/src/browser/tools/common_tools.js +2 -2
  39. package/esm/src/browser/tools/common_tools.js.map +1 -1
  40. package/esm/src/browser/tools/tools.d.ts +1 -1
  41. package/esm/src/browser/tools/tools.js +2 -1
  42. package/esm/src/browser/tools/tools.js.map +1 -1
  43. package/esm/src/browser.d.ts +15 -0
  44. package/esm/src/browser.js +76 -0
  45. package/esm/src/browser.js.map +1 -0
  46. package/esm/src/browser.metadata.json +1 -0
  47. package/esm/src/dom/debug/by.d.ts +2 -2
  48. package/esm/src/dom/debug/by.js +1 -1
  49. package/esm/src/dom/debug/by.js.map +1 -1
  50. package/esm/src/dom/debug/ng_probe.js +10 -19
  51. package/esm/src/dom/debug/ng_probe.js.map +1 -1
  52. package/esm/src/dom/debug/ng_probe.metadata.json +1 -1
  53. package/esm/src/dom/dom_adapter.d.ts +7 -5
  54. package/esm/src/dom/dom_adapter.js +1 -1
  55. package/esm/src/dom/dom_adapter.js.map +1 -1
  56. package/esm/src/dom/dom_adapter.metadata.json +1 -0
  57. package/esm/src/dom/dom_animate_player.d.ts +9 -0
  58. package/esm/src/dom/dom_animate_player.js +1 -0
  59. package/esm/src/dom/dom_animate_player.js.map +1 -0
  60. package/esm/src/dom/dom_renderer.d.ts +9 -19
  61. package/esm/src/dom/dom_renderer.js +29 -61
  62. package/esm/src/dom/dom_renderer.js.map +1 -1
  63. package/esm/src/dom/dom_renderer.metadata.json +1 -1
  64. package/esm/src/dom/dom_tokens.js.map +1 -1
  65. package/esm/src/dom/dom_tokens.metadata.json +1 -1
  66. package/esm/src/dom/events/dom_events.js +3 -2
  67. package/esm/src/dom/events/dom_events.js.map +1 -1
  68. package/esm/src/dom/events/dom_events.metadata.json +1 -1
  69. package/esm/src/dom/events/event_manager.d.ts +1 -3
  70. package/esm/src/dom/events/event_manager.js +9 -8
  71. package/esm/src/dom/events/event_manager.js.map +1 -1
  72. package/esm/src/dom/events/event_manager.metadata.json +1 -1
  73. package/esm/src/dom/events/hammer_common.js +1 -1
  74. package/esm/src/dom/events/hammer_common.js.map +1 -1
  75. package/esm/src/dom/events/hammer_gestures.js +10 -6
  76. package/esm/src/dom/events/hammer_gestures.js.map +1 -1
  77. package/esm/src/dom/events/hammer_gestures.metadata.json +1 -1
  78. package/esm/src/dom/events/key_events.d.ts +0 -2
  79. package/esm/src/dom/events/key_events.js +5 -3
  80. package/esm/src/dom/events/key_events.js.map +1 -1
  81. package/esm/src/dom/events/key_events.metadata.json +1 -1
  82. package/esm/src/dom/shared_styles_host.d.ts +0 -6
  83. package/esm/src/dom/shared_styles_host.js +5 -1
  84. package/esm/src/dom/shared_styles_host.js.map +1 -1
  85. package/esm/src/dom/shared_styles_host.metadata.json +1 -1
  86. package/esm/src/dom/util.js +3 -3
  87. package/esm/src/dom/util.js.map +1 -1
  88. package/esm/src/dom/util.metadata.json +1 -0
  89. package/esm/src/dom/web_animations_driver.d.ts +4 -0
  90. package/esm/src/dom/web_animations_driver.js +118 -0
  91. package/esm/src/dom/web_animations_driver.js.map +1 -0
  92. package/esm/src/dom/web_animations_player.d.ts +20 -0
  93. package/esm/src/dom/web_animations_player.js +42 -0
  94. package/esm/src/dom/web_animations_player.js.map +1 -0
  95. package/esm/src/facade/async.d.ts +90 -0
  96. package/esm/src/facade/async.js +137 -0
  97. package/esm/src/facade/async.js.map +1 -0
  98. package/esm/src/facade/base_wrapped_exception.js +4 -4
  99. package/esm/src/facade/base_wrapped_exception.js.map +1 -1
  100. package/esm/src/facade/browser.js +2 -2
  101. package/esm/src/facade/browser.js.map +1 -1
  102. package/esm/src/facade/browser.metadata.json +1 -1
  103. package/esm/src/facade/collection.js +1 -1
  104. package/esm/src/facade/collection.js.map +1 -1
  105. package/esm/src/facade/collection.metadata.json +1 -1
  106. package/esm/src/facade/exception_handler.d.ts +2 -11
  107. package/esm/src/facade/exception_handler.js +8 -7
  108. package/esm/src/facade/exception_handler.js.map +1 -1
  109. package/esm/src/facade/exceptions.d.ts +4 -0
  110. package/esm/src/facade/exceptions.js +6 -2
  111. package/esm/src/facade/exceptions.js.map +1 -1
  112. package/esm/src/facade/exceptions.metadata.json +1 -0
  113. package/esm/src/facade/lang.d.ts +6 -4
  114. package/esm/src/facade/lang.js +12 -11
  115. package/esm/src/facade/lang.js.map +1 -1
  116. package/esm/src/facade/lang.metadata.json +1 -1
  117. package/esm/src/facade/promise.d.ts +17 -0
  118. package/esm/src/facade/promise.js +41 -0
  119. package/esm/src/facade/promise.js.map +1 -0
  120. package/esm/src/security/dom_sanitization_service.d.ts +98 -0
  121. package/esm/src/security/dom_sanitization_service.js +108 -0
  122. package/esm/src/security/dom_sanitization_service.js.map +1 -0
  123. package/esm/src/security/dom_sanitization_service.metadata.json +1 -0
  124. package/esm/src/security/html_sanitizer.d.ts +5 -0
  125. package/esm/src/security/html_sanitizer.js +233 -0
  126. package/esm/src/security/html_sanitizer.js.map +1 -0
  127. package/esm/src/security/style_sanitizer.d.ts +5 -0
  128. package/esm/src/security/style_sanitizer.js +81 -0
  129. package/esm/src/security/style_sanitizer.js.map +1 -0
  130. package/esm/src/security/url_sanitizer.d.ts +1 -0
  131. package/esm/src/security/url_sanitizer.js +40 -0
  132. package/esm/src/security/url_sanitizer.js.map +1 -0
  133. package/esm/src/web_workers/shared/api.d.ts +2 -0
  134. package/esm/src/web_workers/shared/api.js +3 -0
  135. package/esm/src/web_workers/shared/api.js.map +1 -0
  136. package/esm/src/web_workers/shared/api.metadata.json +1 -0
  137. package/esm/src/web_workers/shared/client_message_broker.d.ts +51 -0
  138. package/esm/src/web_workers/shared/client_message_broker.js +156 -0
  139. package/esm/src/web_workers/shared/client_message_broker.js.map +1 -0
  140. package/esm/src/web_workers/shared/client_message_broker.metadata.json +1 -0
  141. package/esm/src/web_workers/shared/message_bus.d.ts +82 -0
  142. package/esm/src/web_workers/shared/message_bus.js +10 -0
  143. package/esm/src/web_workers/shared/message_bus.js.map +1 -0
  144. package/esm/src/web_workers/shared/messaging_api.d.ts +7 -0
  145. package/esm/src/web_workers/shared/messaging_api.js +8 -0
  146. package/esm/src/web_workers/shared/messaging_api.js.map +1 -0
  147. package/esm/src/web_workers/shared/messaging_api.metadata.json +1 -0
  148. package/esm/src/web_workers/shared/post_message_bus.d.ts +41 -0
  149. package/esm/src/web_workers/shared/post_message_bus.js +133 -0
  150. package/esm/src/web_workers/shared/post_message_bus.js.map +1 -0
  151. package/esm/src/web_workers/shared/post_message_bus.metadata.json +1 -0
  152. package/esm/src/web_workers/shared/render_store.d.ts +11 -0
  153. package/esm/src/web_workers/shared/render_store.js +40 -0
  154. package/esm/src/web_workers/shared/render_store.js.map +1 -0
  155. package/esm/src/web_workers/shared/render_store.metadata.json +1 -0
  156. package/esm/src/web_workers/shared/serialized_types.d.ts +12 -0
  157. package/esm/src/web_workers/shared/serialized_types.js +16 -0
  158. package/esm/src/web_workers/shared/serialized_types.js.map +1 -0
  159. package/esm/src/web_workers/shared/serializer.d.ts +18 -0
  160. package/esm/src/web_workers/shared/serializer.js +110 -0
  161. package/esm/src/web_workers/shared/serializer.js.map +1 -0
  162. package/esm/src/web_workers/shared/serializer.metadata.json +1 -0
  163. package/esm/src/web_workers/shared/service_message_broker.d.ts +48 -0
  164. package/esm/src/web_workers/shared/service_message_broker.js +88 -0
  165. package/esm/src/web_workers/shared/service_message_broker.js.map +1 -0
  166. package/esm/src/web_workers/shared/service_message_broker.metadata.json +1 -0
  167. package/esm/src/web_workers/ui/event_dispatcher.d.ts +8 -0
  168. package/esm/src/web_workers/ui/event_dispatcher.js +104 -0
  169. package/esm/src/web_workers/ui/event_dispatcher.js.map +1 -0
  170. package/esm/src/web_workers/ui/event_serializer.d.ts +15 -0
  171. package/esm/src/web_workers/ui/event_serializer.js +53 -0
  172. package/esm/src/web_workers/ui/event_serializer.js.map +1 -0
  173. package/esm/src/web_workers/ui/event_serializer.metadata.json +1 -0
  174. package/esm/src/web_workers/ui/location_providers.d.ts +14 -0
  175. package/esm/src/web_workers/ui/location_providers.js +19 -0
  176. package/esm/src/web_workers/ui/location_providers.js.map +1 -0
  177. package/esm/src/web_workers/ui/location_providers.metadata.json +1 -0
  178. package/esm/src/web_workers/ui/platform_location.d.ts +16 -0
  179. package/esm/src/web_workers/ui/platform_location.js +49 -0
  180. package/esm/src/web_workers/ui/platform_location.js.map +1 -0
  181. package/esm/src/web_workers/ui/platform_location.metadata.json +1 -0
  182. package/esm/src/web_workers/ui/renderer.d.ts +35 -0
  183. package/esm/src/web_workers/ui/renderer.js +122 -0
  184. package/esm/src/web_workers/ui/renderer.js.map +1 -0
  185. package/esm/src/web_workers/ui/renderer.metadata.json +1 -0
  186. package/esm/src/web_workers/worker/event_deserializer.d.ts +5 -0
  187. package/esm/src/web_workers/worker/event_deserializer.js +6 -0
  188. package/esm/src/web_workers/worker/event_deserializer.js.map +1 -0
  189. package/esm/src/web_workers/worker/event_deserializer.metadata.json +1 -0
  190. package/esm/src/web_workers/worker/location_providers.d.ts +17 -0
  191. package/esm/src/web_workers/worker/location_providers.js +20 -0
  192. package/esm/src/web_workers/worker/location_providers.js.map +1 -0
  193. package/esm/src/web_workers/worker/location_providers.metadata.json +1 -0
  194. package/esm/src/web_workers/worker/platform_location.d.ts +23 -0
  195. package/esm/src/web_workers/worker/platform_location.js +111 -0
  196. package/esm/src/web_workers/worker/platform_location.js.map +1 -0
  197. package/esm/src/web_workers/worker/platform_location.metadata.json +1 -0
  198. package/esm/src/web_workers/worker/renderer.d.ts +55 -0
  199. package/esm/src/web_workers/worker/renderer.js +227 -0
  200. package/esm/src/web_workers/worker/renderer.js.map +1 -0
  201. package/esm/src/web_workers/worker/renderer.metadata.json +1 -0
  202. package/esm/src/web_workers/worker/worker_adapter.d.ts +132 -0
  203. package/esm/src/web_workers/worker/worker_adapter.js +192 -0
  204. package/esm/src/web_workers/worker/worker_adapter.js.map +1 -0
  205. package/esm/src/worker_app.d.ts +13 -0
  206. package/esm/src/worker_app.js +68 -0
  207. package/esm/src/worker_app.js.map +1 -0
  208. package/esm/src/worker_app.metadata.json +1 -0
  209. package/esm/src/worker_render.d.ts +35 -0
  210. package/esm/src/worker_render.js +147 -0
  211. package/esm/src/worker_render.js.map +1 -0
  212. package/esm/src/worker_render.metadata.json +1 -0
  213. package/esm/testing/browser.d.ts +8 -0
  214. package/esm/testing/browser.js +38 -0
  215. package/esm/testing/browser.js.map +1 -0
  216. package/esm/testing/browser.metadata.json +1 -0
  217. package/esm/testing/browser_util.d.ts +1 -0
  218. package/esm/testing/browser_util.js +11 -6
  219. package/esm/testing/browser_util.js.map +1 -1
  220. package/esm/testing/browser_util.metadata.json +1 -1
  221. package/esm/testing/e2e_util.d.ts +4 -0
  222. package/esm/testing/e2e_util.js +21 -0
  223. package/esm/testing/e2e_util.js.map +1 -0
  224. package/esm/testing/e2e_util.metadata.json +1 -0
  225. package/esm/testing/matchers.js +24 -22
  226. package/esm/testing/matchers.js.map +1 -1
  227. package/esm/testing/matchers.metadata.json +1 -1
  228. package/esm/testing.d.ts +1 -2
  229. package/esm/testing.js +1 -2
  230. package/esm/testing.js.map +1 -1
  231. package/esm/testing_e2e.d.ts +1 -0
  232. package/esm/testing_e2e.js +2 -0
  233. package/esm/testing_e2e.js.map +1 -0
  234. package/index.d.ts +22 -1
  235. package/index.js +50 -1
  236. package/index.js.map +1 -1
  237. package/index.metadata.json +1 -0
  238. package/package.json +8 -4
  239. package/private_export.d.ts +21 -21
  240. package/private_export.js +11 -21
  241. package/private_export.js.map +1 -1
  242. package/private_export.metadata.json +1 -0
  243. package/src/browser/browser_adapter.d.ts +6 -0
  244. package/src/browser/browser_adapter.js +144 -76
  245. package/src/browser/browser_adapter.js.map +1 -1
  246. package/src/browser/generic_browser_adapter.js +4 -4
  247. package/src/browser/generic_browser_adapter.js.map +1 -1
  248. package/src/browser/location/browser_platform_location.d.ts +1 -5
  249. package/src/browser/location/browser_platform_location.js +16 -3
  250. package/src/browser/location/browser_platform_location.js.map +1 -1
  251. package/src/browser/location/browser_platform_location.metadata.json +1 -1
  252. package/src/browser/location/history.d.ts +1 -0
  253. package/src/browser/location/history.js +6 -0
  254. package/src/browser/location/history.js.map +1 -0
  255. package/src/browser/location/history.metadata.json +1 -0
  256. package/src/browser/testability.d.ts +1 -1
  257. package/src/browser/testability.js +7 -5
  258. package/src/browser/testability.js.map +1 -1
  259. package/src/browser/title.d.ts +2 -0
  260. package/src/browser/title.js +2 -0
  261. package/src/browser/title.js.map +1 -1
  262. package/src/browser/tools/common_tools.js +2 -2
  263. package/src/browser/tools/common_tools.js.map +1 -1
  264. package/src/browser/tools/tools.d.ts +1 -1
  265. package/src/browser/tools/tools.js +2 -1
  266. package/src/browser/tools/tools.js.map +1 -1
  267. package/src/browser.d.ts +15 -0
  268. package/src/browser.js +78 -0
  269. package/src/browser.js.map +1 -0
  270. package/src/browser.metadata.json +1 -0
  271. package/src/dom/debug/by.d.ts +2 -2
  272. package/src/dom/debug/by.js +1 -1
  273. package/src/dom/debug/by.js.map +1 -1
  274. package/src/dom/debug/ng_probe.js +9 -18
  275. package/src/dom/debug/ng_probe.js.map +1 -1
  276. package/src/dom/debug/ng_probe.metadata.json +1 -1
  277. package/src/dom/dom_adapter.d.ts +7 -5
  278. package/src/dom/dom_adapter.js +1 -1
  279. package/src/dom/dom_adapter.js.map +1 -1
  280. package/src/dom/dom_adapter.metadata.json +1 -0
  281. package/src/dom/dom_animate_player.d.ts +9 -0
  282. package/src/dom/dom_animate_player.js +2 -0
  283. package/src/dom/dom_animate_player.js.map +1 -0
  284. package/src/dom/dom_renderer.d.ts +9 -19
  285. package/src/dom/dom_renderer.js +29 -61
  286. package/src/dom/dom_renderer.js.map +1 -1
  287. package/src/dom/dom_renderer.metadata.json +1 -1
  288. package/src/dom/dom_tokens.js.map +1 -1
  289. package/src/dom/dom_tokens.metadata.json +1 -1
  290. package/src/dom/events/dom_events.js +3 -2
  291. package/src/dom/events/dom_events.js.map +1 -1
  292. package/src/dom/events/dom_events.metadata.json +1 -1
  293. package/src/dom/events/event_manager.d.ts +1 -3
  294. package/src/dom/events/event_manager.js +8 -7
  295. package/src/dom/events/event_manager.js.map +1 -1
  296. package/src/dom/events/event_manager.metadata.json +1 -1
  297. package/src/dom/events/hammer_common.js +1 -1
  298. package/src/dom/events/hammer_common.js.map +1 -1
  299. package/src/dom/events/hammer_gestures.js +9 -5
  300. package/src/dom/events/hammer_gestures.js.map +1 -1
  301. package/src/dom/events/hammer_gestures.metadata.json +1 -1
  302. package/src/dom/events/key_events.d.ts +0 -2
  303. package/src/dom/events/key_events.js +5 -3
  304. package/src/dom/events/key_events.js.map +1 -1
  305. package/src/dom/events/key_events.metadata.json +1 -1
  306. package/src/dom/shared_styles_host.d.ts +0 -6
  307. package/src/dom/shared_styles_host.js +5 -1
  308. package/src/dom/shared_styles_host.js.map +1 -1
  309. package/src/dom/shared_styles_host.metadata.json +1 -1
  310. package/src/dom/util.js +3 -3
  311. package/src/dom/util.js.map +1 -1
  312. package/src/dom/util.metadata.json +1 -0
  313. package/src/dom/web_animations_driver.d.ts +4 -0
  314. package/src/dom/web_animations_driver.js +123 -0
  315. package/src/dom/web_animations_driver.js.map +1 -0
  316. package/src/dom/web_animations_player.d.ts +20 -0
  317. package/src/dom/web_animations_player.js +46 -0
  318. package/src/dom/web_animations_player.js.map +1 -0
  319. package/src/facade/async.d.ts +90 -0
  320. package/src/facade/async.js +160 -0
  321. package/src/facade/async.js.map +1 -0
  322. package/src/facade/base_wrapped_exception.js +4 -4
  323. package/src/facade/base_wrapped_exception.js.map +1 -1
  324. package/src/facade/browser.js +2 -2
  325. package/src/facade/browser.js.map +1 -1
  326. package/src/facade/browser.metadata.json +1 -1
  327. package/src/facade/collection.js.map +1 -1
  328. package/src/facade/collection.metadata.json +1 -1
  329. package/src/facade/exception_handler.d.ts +2 -11
  330. package/src/facade/exception_handler.js +8 -7
  331. package/src/facade/exception_handler.js.map +1 -1
  332. package/src/facade/exceptions.d.ts +4 -0
  333. package/src/facade/exceptions.js +6 -2
  334. package/src/facade/exceptions.js.map +1 -1
  335. package/src/facade/exceptions.metadata.json +1 -0
  336. package/src/facade/lang.d.ts +6 -4
  337. package/src/facade/lang.js +12 -11
  338. package/src/facade/lang.js.map +1 -1
  339. package/src/facade/lang.metadata.json +1 -1
  340. package/src/facade/promise.d.ts +17 -0
  341. package/src/facade/promise.js +49 -0
  342. package/src/facade/promise.js.map +1 -0
  343. package/src/security/dom_sanitization_service.d.ts +98 -0
  344. package/src/security/dom_sanitization_service.js +150 -0
  345. package/src/security/dom_sanitization_service.js.map +1 -0
  346. package/src/security/dom_sanitization_service.metadata.json +1 -0
  347. package/src/security/html_sanitizer.d.ts +5 -0
  348. package/src/security/html_sanitizer.js +246 -0
  349. package/src/security/html_sanitizer.js.map +1 -0
  350. package/src/security/style_sanitizer.d.ts +5 -0
  351. package/src/security/style_sanitizer.js +83 -0
  352. package/src/security/style_sanitizer.js.map +1 -0
  353. package/src/security/url_sanitizer.d.ts +1 -0
  354. package/src/security/url_sanitizer.js +42 -0
  355. package/src/security/url_sanitizer.js.map +1 -0
  356. package/src/web_workers/shared/api.d.ts +2 -0
  357. package/src/web_workers/shared/api.js +4 -0
  358. package/src/web_workers/shared/api.js.map +1 -0
  359. package/src/web_workers/shared/api.metadata.json +1 -0
  360. package/src/web_workers/shared/client_message_broker.d.ts +51 -0
  361. package/src/web_workers/shared/client_message_broker.js +184 -0
  362. package/src/web_workers/shared/client_message_broker.js.map +1 -0
  363. package/src/web_workers/shared/client_message_broker.metadata.json +1 -0
  364. package/src/web_workers/shared/message_bus.d.ts +82 -0
  365. package/src/web_workers/shared/message_bus.js +15 -0
  366. package/src/web_workers/shared/message_bus.js.map +1 -0
  367. package/src/web_workers/shared/messaging_api.d.ts +7 -0
  368. package/src/web_workers/shared/messaging_api.js +9 -0
  369. package/src/web_workers/shared/messaging_api.js.map +1 -0
  370. package/src/web_workers/shared/messaging_api.metadata.json +1 -0
  371. package/src/web_workers/shared/post_message_bus.d.ts +41 -0
  372. package/src/web_workers/shared/post_message_bus.js +147 -0
  373. package/src/web_workers/shared/post_message_bus.js.map +1 -0
  374. package/src/web_workers/shared/post_message_bus.metadata.json +1 -0
  375. package/src/web_workers/shared/render_store.d.ts +11 -0
  376. package/src/web_workers/shared/render_store.js +43 -0
  377. package/src/web_workers/shared/render_store.js.map +1 -0
  378. package/src/web_workers/shared/render_store.metadata.json +1 -0
  379. package/src/web_workers/shared/serialized_types.d.ts +12 -0
  380. package/src/web_workers/shared/serialized_types.js +19 -0
  381. package/src/web_workers/shared/serialized_types.js.map +1 -0
  382. package/src/web_workers/shared/serializer.d.ts +18 -0
  383. package/src/web_workers/shared/serializer.js +119 -0
  384. package/src/web_workers/shared/serializer.js.map +1 -0
  385. package/src/web_workers/shared/serializer.metadata.json +1 -0
  386. package/src/web_workers/shared/service_message_broker.d.ts +48 -0
  387. package/src/web_workers/shared/service_message_broker.js +114 -0
  388. package/src/web_workers/shared/service_message_broker.js.map +1 -0
  389. package/src/web_workers/shared/service_message_broker.metadata.json +1 -0
  390. package/src/web_workers/ui/event_dispatcher.d.ts +8 -0
  391. package/src/web_workers/ui/event_dispatcher.js +107 -0
  392. package/src/web_workers/ui/event_dispatcher.js.map +1 -0
  393. package/src/web_workers/ui/event_serializer.d.ts +15 -0
  394. package/src/web_workers/ui/event_serializer.js +59 -0
  395. package/src/web_workers/ui/event_serializer.js.map +1 -0
  396. package/src/web_workers/ui/event_serializer.metadata.json +1 -0
  397. package/src/web_workers/ui/location_providers.d.ts +14 -0
  398. package/src/web_workers/ui/location_providers.js +20 -0
  399. package/src/web_workers/ui/location_providers.js.map +1 -0
  400. package/src/web_workers/ui/location_providers.metadata.json +1 -0
  401. package/src/web_workers/ui/platform_location.d.ts +16 -0
  402. package/src/web_workers/ui/platform_location.js +52 -0
  403. package/src/web_workers/ui/platform_location.js.map +1 -0
  404. package/src/web_workers/ui/platform_location.metadata.json +1 -0
  405. package/src/web_workers/ui/renderer.d.ts +35 -0
  406. package/src/web_workers/ui/renderer.js +131 -0
  407. package/src/web_workers/ui/renderer.js.map +1 -0
  408. package/src/web_workers/ui/renderer.metadata.json +1 -0
  409. package/src/web_workers/worker/event_deserializer.d.ts +5 -0
  410. package/src/web_workers/worker/event_deserializer.js +8 -0
  411. package/src/web_workers/worker/event_deserializer.js.map +1 -0
  412. package/src/web_workers/worker/event_deserializer.metadata.json +1 -0
  413. package/src/web_workers/worker/location_providers.d.ts +17 -0
  414. package/src/web_workers/worker/location_providers.js +21 -0
  415. package/src/web_workers/worker/location_providers.js.map +1 -0
  416. package/src/web_workers/worker/location_providers.metadata.json +1 -0
  417. package/src/web_workers/worker/platform_location.d.ts +23 -0
  418. package/src/web_workers/worker/platform_location.js +134 -0
  419. package/src/web_workers/worker/platform_location.js.map +1 -0
  420. package/src/web_workers/worker/platform_location.metadata.json +1 -0
  421. package/src/web_workers/worker/renderer.d.ts +55 -0
  422. package/src/web_workers/worker/renderer.js +241 -0
  423. package/src/web_workers/worker/renderer.js.map +1 -0
  424. package/src/web_workers/worker/renderer.metadata.json +1 -0
  425. package/src/web_workers/worker/worker_adapter.d.ts +132 -0
  426. package/src/web_workers/worker/worker_adapter.js +208 -0
  427. package/src/web_workers/worker/worker_adapter.js.map +1 -0
  428. package/src/worker_app.d.ts +13 -0
  429. package/src/worker_app.js +71 -0
  430. package/src/worker_app.js.map +1 -0
  431. package/src/worker_app.metadata.json +1 -0
  432. package/src/worker_render.d.ts +35 -0
  433. package/src/worker_render.js +153 -0
  434. package/src/worker_render.js.map +1 -0
  435. package/src/worker_render.metadata.json +1 -0
  436. package/testing/browser.d.ts +8 -0
  437. package/testing/browser.js +39 -0
  438. package/testing/browser.js.map +1 -0
  439. package/testing/browser.metadata.json +1 -0
  440. package/testing/browser_util.d.ts +1 -0
  441. package/testing/browser_util.js +14 -5
  442. package/testing/browser_util.js.map +1 -1
  443. package/testing/browser_util.metadata.json +1 -1
  444. package/testing/e2e_util.d.ts +4 -0
  445. package/testing/e2e_util.js +24 -0
  446. package/testing/e2e_util.js.map +1 -0
  447. package/testing/e2e_util.metadata.json +1 -0
  448. package/testing/matchers.js +24 -22
  449. package/testing/matchers.js.map +1 -1
  450. package/testing/matchers.metadata.json +1 -1
  451. package/testing.d.ts +1 -2
  452. package/testing.js +1 -2
  453. package/testing.js.map +1 -1
  454. package/testing_e2e.d.ts +1 -0
  455. package/testing_e2e.js +6 -0
  456. package/testing_e2e.js.map +1 -0
  457. package/esm/platform-browser.umd.js.map +0 -1
  458. package/esm/src/animate/animation.d.ts +0 -82
  459. package/esm/src/animate/animation.js +0 -173
  460. package/esm/src/animate/animation.js.map +0 -1
  461. package/esm/src/animate/animation_builder.d.ts +0 -15
  462. package/esm/src/animate/animation_builder.js +0 -24
  463. package/esm/src/animate/animation_builder.js.map +0 -1
  464. package/esm/src/animate/animation_builder.metadata.json +0 -1
  465. package/esm/src/animate/browser_details.d.ts +0 -10
  466. package/esm/src/animate/browser_details.js +0 -60
  467. package/esm/src/animate/browser_details.js.map +0 -1
  468. package/esm/src/animate/browser_details.metadata.json +0 -1
  469. package/esm/src/animate/css_animation_builder.d.ts +0 -66
  470. package/esm/src/animate/css_animation_builder.js +0 -84
  471. package/esm/src/animate/css_animation_builder.js.map +0 -1
  472. package/esm/src/animate/css_animation_options.d.ts +0 -20
  473. package/esm/src/animate/css_animation_options.js +0 -11
  474. package/esm/src/animate/css_animation_options.js.map +0 -1
  475. package/esm/src/browser_common.d.ts +0 -20
  476. package/esm/src/browser_common.js +0 -76
  477. package/esm/src/browser_common.js.map +0 -1
  478. package/esm/src/browser_common.metadata.json +0 -1
  479. package/esm/src/facade/math.d.ts +0 -2
  480. package/esm/src/facade/math.js +0 -4
  481. package/esm/src/facade/math.js.map +0 -1
  482. package/esm/src/facade/math.metadata.json +0 -1
  483. package/esm/src/platform_browser.d.ts +0 -9
  484. package/esm/src/platform_browser.js +0 -17
  485. package/esm/src/platform_browser.js.map +0 -1
  486. package/esm/src/platform_browser_static.d.ts +0 -16
  487. package/esm/src/platform_browser_static.js +0 -32
  488. package/esm/src/platform_browser_static.js.map +0 -1
  489. package/esm/src/platform_browser_static.metadata.json +0 -1
  490. package/esm/testing/animation_builder_mock.d.ts +0 -6
  491. package/esm/testing/animation_builder_mock.js +0 -35
  492. package/esm/testing/animation_builder_mock.js.map +0 -1
  493. package/esm/testing/animation_builder_mock.metadata.json +0 -1
  494. package/esm/testing/browser_static.d.ts +0 -10
  495. package/esm/testing/browser_static.js +0 -53
  496. package/esm/testing/browser_static.js.map +0 -1
  497. package/esm/testing/browser_static.metadata.json +0 -1
  498. package/esm/testing/dom_test_component_renderer.d.ts +0 -9
  499. package/esm/testing/dom_test_component_renderer.js +0 -27
  500. package/esm/testing/dom_test_component_renderer.js.map +0 -1
  501. package/esm/testing/dom_test_component_renderer.metadata.json +0 -1
  502. package/platform-browser.umd.js +0 -2488
  503. package/src/animate/animation.d.ts +0 -82
  504. package/src/animate/animation.js +0 -183
  505. package/src/animate/animation.js.map +0 -1
  506. package/src/animate/animation_builder.d.ts +0 -15
  507. package/src/animate/animation_builder.js +0 -27
  508. package/src/animate/animation_builder.js.map +0 -1
  509. package/src/animate/animation_builder.metadata.json +0 -1
  510. package/src/animate/browser_details.d.ts +0 -10
  511. package/src/animate/browser_details.js +0 -66
  512. package/src/animate/browser_details.js.map +0 -1
  513. package/src/animate/browser_details.metadata.json +0 -1
  514. package/src/animate/css_animation_builder.d.ts +0 -66
  515. package/src/animate/css_animation_builder.js +0 -87
  516. package/src/animate/css_animation_builder.js.map +0 -1
  517. package/src/animate/css_animation_options.d.ts +0 -20
  518. package/src/animate/css_animation_options.js +0 -14
  519. package/src/animate/css_animation_options.js.map +0 -1
  520. package/src/browser_common.d.ts +0 -20
  521. package/src/browser_common.js +0 -85
  522. package/src/browser_common.js.map +0 -1
  523. package/src/browser_common.metadata.json +0 -1
  524. package/src/facade/math.d.ts +0 -2
  525. package/src/facade/math.js +0 -5
  526. package/src/facade/math.js.map +0 -1
  527. package/src/facade/math.metadata.json +0 -1
  528. package/src/platform_browser.d.ts +0 -9
  529. package/src/platform_browser.js +0 -39
  530. package/src/platform_browser.js.map +0 -1
  531. package/src/platform_browser_static.d.ts +0 -16
  532. package/src/platform_browser_static.js +0 -42
  533. package/src/platform_browser_static.js.map +0 -1
  534. package/src/platform_browser_static.metadata.json +0 -1
  535. package/testing/animation_builder_mock.d.ts +0 -6
  536. package/testing/animation_builder_mock.js +0 -53
  537. package/testing/animation_builder_mock.js.map +0 -1
  538. package/testing/animation_builder_mock.metadata.json +0 -1
  539. package/testing/browser_static.d.ts +0 -10
  540. package/testing/browser_static.js +0 -55
  541. package/testing/browser_static.js.map +0 -1
  542. package/testing/browser_static.metadata.json +0 -1
  543. package/testing/dom_test_component_renderer.d.ts +0 -9
  544. package/testing/dom_test_component_renderer.js +0 -36
  545. package/testing/dom_test_component_renderer.js.map +0 -1
  546. package/testing/dom_test_component_renderer.metadata.json +0 -1
package/src/security/html_sanitizer.js ADDED
@@ -0,0 +1,246 @@
1
+ "use strict";
2
+ var dom_adapter_1 = require('../dom/dom_adapter');
3
+ var lang_1 = require('../facade/lang');
4
+ var url_sanitizer_1 = require('./url_sanitizer');
5
+ /** A <body> element that can be safely used to parse untrusted HTML. Lazily initialized below. */
6
+ var inertElement = null;
7
+ /** Lazily initialized to make sure the DOM adapter gets set before use. */
8
+ var DOM = null;
9
+ /** Returns an HTML element that is guaranteed to not execute code when creating elements in it. */
10
+ function getInertElement() {
11
+ if (inertElement)
12
+ return inertElement;
13
+ DOM = dom_adapter_1.getDOM();
14
+ // Prefer using <template> element if supported.
15
+ var templateEl = DOM.createElement('template');
16
+ if ('content' in templateEl)
17
+ return templateEl;
18
+ var doc = DOM.createHtmlDocument();
19
+ inertElement = DOM.querySelector(doc, 'body');
20
+ if (inertElement == null) {
21
+ // usually there should be only one body element in the document, but IE doesn't have any, so we
22
+ // need to create one.
23
+ var html = DOM.createElement('html', doc);
24
+ inertElement = DOM.createElement('body', doc);
25
+ DOM.appendChild(html, inertElement);
26
+ DOM.appendChild(doc, html);
27
+ }
28
+ return inertElement;
29
+ }
30
+ function tagSet(tags) {
31
+ var res = {};
32
+ for (var _i = 0, _a = tags.split(','); _i < _a.length; _i++) {
33
+ var t = _a[_i];
34
+ res[t.toLowerCase()] = true;
35
+ }
36
+ return res;
37
+ }
38
+ function merge() {
39
+ var sets = [];
40
+ for (var _i = 0; _i < arguments.length; _i++) {
41
+ sets[_i - 0] = arguments[_i];
42
+ }
43
+ var res = {};
44
+ for (var _a = 0, sets_1 = sets; _a < sets_1.length; _a++) {
45
+ var s = sets_1[_a];
46
+ for (var v in s) {
47
+ if (s.hasOwnProperty(v))
48
+ res[v] = true;
49
+ }
50
+ }
51
+ return res;
52
+ }
53
+ // Good source of info about elements and attributes
54
+ // http://dev.w3.org/html5/spec/Overview.html#semantics
55
+ // http://simon.html5.org/html-elements
56
+ // Safe Void Elements - HTML5
57
+ // http://dev.w3.org/html5/spec/Overview.html#void-elements
58
+ var VOID_ELEMENTS = tagSet('area,br,col,hr,img,wbr');
59
+ // Elements that you can, intentionally, leave open (and which close themselves)
60
+ // http://dev.w3.org/html5/spec/Overview.html#optional-tags
61
+ var OPTIONAL_END_TAG_BLOCK_ELEMENTS = tagSet('colgroup,dd,dt,li,p,tbody,td,tfoot,th,thead,tr');
62
+ var OPTIONAL_END_TAG_INLINE_ELEMENTS = tagSet('rp,rt');
63
+ var OPTIONAL_END_TAG_ELEMENTS = merge(OPTIONAL_END_TAG_INLINE_ELEMENTS, OPTIONAL_END_TAG_BLOCK_ELEMENTS);
64
+ // Safe Block Elements - HTML5
65
+ var BLOCK_ELEMENTS = merge(OPTIONAL_END_TAG_BLOCK_ELEMENTS, tagSet('address,article,' +
66
+ 'aside,blockquote,caption,center,del,dir,div,dl,figure,figcaption,footer,h1,h2,h3,h4,h5,' +
67
+ 'h6,header,hgroup,hr,ins,map,menu,nav,ol,pre,section,table,ul'));
68
+ // Inline Elements - HTML5
69
+ var INLINE_ELEMENTS = merge(OPTIONAL_END_TAG_INLINE_ELEMENTS, tagSet('a,abbr,acronym,b,' +
70
+ 'bdi,bdo,big,br,cite,code,del,dfn,em,font,i,img,ins,kbd,label,map,mark,q,ruby,rp,rt,s,' +
71
+ 'samp,small,span,strike,strong,sub,sup,time,tt,u,var'));
72
+ var VALID_ELEMENTS = merge(VOID_ELEMENTS, BLOCK_ELEMENTS, INLINE_ELEMENTS, OPTIONAL_END_TAG_ELEMENTS);
73
+ // Attributes that have href and hence need to be sanitized
74
+ var URI_ATTRS = tagSet('background,cite,href,longdesc,src,xlink:href');
75
+ var HTML_ATTRS = tagSet('abbr,align,alt,axis,bgcolor,border,cellpadding,cellspacing,class,clear,' +
76
+ 'color,cols,colspan,compact,coords,dir,face,headers,height,hreflang,hspace,' +
77
+ 'ismap,lang,language,nohref,nowrap,rel,rev,rows,rowspan,rules,' +
78
+ 'scope,scrolling,shape,size,span,start,summary,tabindex,target,title,type,' +
79
+ 'valign,value,vspace,width');
80
+ // NB: This currently conciously doesn't support SVG. SVG sanitization has had several security
81
+ // issues in the past, so it seems safer to leave it out if possible. If support for binding SVG via
82
+ // innerHTML is required, SVG attributes should be added here.
83
+ // NB: Sanitization does not allow <form> elements or other active elements (<button> etc). Those
84
+ // can be sanitized, but they increase security surface area without a legitimate use case, so they
85
+ // are left out here.
86
+ var VALID_ATTRS = merge(URI_ATTRS, HTML_ATTRS);
87
+ /**
88
+ * SanitizingHtmlSerializer serializes a DOM fragment, stripping out any unsafe elements and unsafe
89
+ * attributes.
90
+ */
91
+ var SanitizingHtmlSerializer = (function () {
92
+ function SanitizingHtmlSerializer() {
93
+ this.buf = [];
94
+ }
95
+ SanitizingHtmlSerializer.prototype.sanitizeChildren = function (el) {
96
+ // This cannot use a TreeWalker, as it has to run on Angular's various DOM adapters.
97
+ // However this code never accesses properties off of `document` before deleting its contents
98
+ // again, so it shouldn't be vulnerable to DOM clobbering.
99
+ var current = el.firstChild;
100
+ while (current) {
101
+ if (DOM.isElementNode(current)) {
102
+ this.startElement(current);
103
+ }
104
+ else if (DOM.isTextNode(current)) {
105
+ this.chars(DOM.nodeValue(current));
106
+ }
107
+ if (DOM.firstChild(current)) {
108
+ current = DOM.firstChild(current);
109
+ continue;
110
+ }
111
+ while (current) {
112
+ // Leaving the element. Walk up and to the right, closing tags as we go.
113
+ if (DOM.isElementNode(current)) {
114
+ this.endElement(DOM.nodeName(current).toLowerCase());
115
+ }
116
+ if (DOM.nextSibling(current)) {
117
+ current = DOM.nextSibling(current);
118
+ break;
119
+ }
120
+ current = DOM.parentElement(current);
121
+ }
122
+ }
123
+ return this.buf.join('');
124
+ };
125
+ SanitizingHtmlSerializer.prototype.startElement = function (element) {
126
+ var _this = this;
127
+ var tagName = DOM.nodeName(element).toLowerCase();
128
+ tagName = tagName.toLowerCase();
129
+ if (VALID_ELEMENTS.hasOwnProperty(tagName)) {
130
+ this.buf.push('<');
131
+ this.buf.push(tagName);
132
+ DOM.attributeMap(element).forEach(function (value, attrName) {
133
+ var lower = attrName.toLowerCase();
134
+ if (!VALID_ATTRS.hasOwnProperty(lower))
135
+ return;
136
+ // TODO(martinprobst): Special case image URIs for data:image/...
137
+ if (URI_ATTRS[lower])
138
+ value = url_sanitizer_1.sanitizeUrl(value);
139
+ _this.buf.push(' ');
140
+ _this.buf.push(attrName);
141
+ _this.buf.push('="');
142
+ _this.buf.push(encodeEntities(value));
143
+ _this.buf.push('"');
144
+ });
145
+ this.buf.push('>');
146
+ }
147
+ };
148
+ SanitizingHtmlSerializer.prototype.endElement = function (tagName) {
149
+ tagName = tagName.toLowerCase();
150
+ if (VALID_ELEMENTS.hasOwnProperty(tagName) && !VOID_ELEMENTS.hasOwnProperty(tagName)) {
151
+ this.buf.push('</');
152
+ this.buf.push(tagName);
153
+ this.buf.push('>');
154
+ }
155
+ };
156
+ SanitizingHtmlSerializer.prototype.chars = function (chars /** TODO #9100 */) { this.buf.push(encodeEntities(chars)); };
157
+ return SanitizingHtmlSerializer;
158
+ }());
159
+ // Regular Expressions for parsing tags and attributes
160
+ var SURROGATE_PAIR_REGEXP = /[\uD800-\uDBFF][\uDC00-\uDFFF]/g;
161
+ // ! to ~ is the ASCII range.
162
+ var NON_ALPHANUMERIC_REGEXP = /([^\#-~ |!])/g;
163
+ /**
164
+ * Escapes all potentially dangerous characters, so that the
165
+ * resulting string can be safely inserted into attribute or
166
+ * element text.
167
+ * @param value
168
+ * @returns {string} escaped text
169
+ */
170
+ function encodeEntities(value /** TODO #9100 */) {
171
+ return value.replace(/&/g, '&amp;')
172
+ .replace(SURROGATE_PAIR_REGEXP, function (match /** TODO #9100 */) {
173
+ var hi = match.charCodeAt(0);
174
+ var low = match.charCodeAt(1);
175
+ return '&#' + (((hi - 0xD800) * 0x400) + (low - 0xDC00) + 0x10000) + ';';
176
+ })
177
+ .replace(NON_ALPHANUMERIC_REGEXP, function (match /** TODO #9100 */) { return '&#' + match.charCodeAt(0) + ';'; })
178
+ .replace(/</g, '&lt;')
179
+ .replace(/>/g, '&gt;');
180
+ }
181
+ /**
182
+ * When IE9-11 comes across an unknown namespaced attribute e.g. 'xlink:foo' it adds 'xmlns:ns1'
183
+ * attribute to declare ns1 namespace and prefixes the attribute with 'ns1' (e.g. 'ns1:xlink:foo').
184
+ *
185
+ * This is undesirable since we don't want to allow any of these custom attributes. This method
186
+ * strips them all.
187
+ */
188
+ function stripCustomNsAttrs(el) {
189
+ DOM.attributeMap(el).forEach(function (_, attrName) {
190
+ if (attrName === 'xmlns:ns1' || attrName.indexOf('ns1:') === 0) {
191
+ DOM.removeAttribute(el, attrName);
192
+ }
193
+ });
194
+ for (var _i = 0, _a = DOM.childNodesAsList(el); _i < _a.length; _i++) {
195
+ var n = _a[_i];
196
+ if (DOM.isElementNode(n))
197
+ stripCustomNsAttrs(n);
198
+ }
199
+ }
200
+ /**
201
+ * Sanitizes the given unsafe, untrusted HTML fragment, and returns HTML text that is safe to add to
202
+ * the DOM in a browser environment.
203
+ */
204
+ function sanitizeHtml(unsafeHtml) {
205
+ try {
206
+ var containerEl = getInertElement();
207
+ // Make sure unsafeHtml is actually a string (TypeScript types are not enforced at runtime).
208
+ unsafeHtml = unsafeHtml ? String(unsafeHtml) : '';
209
+ // mXSS protection. Repeatedly parse the document to make sure it stabilizes, so that a browser
210
+ // trying to auto-correct incorrect HTML cannot cause formerly inert HTML to become dangerous.
211
+ var mXSSAttempts = 5;
212
+ var parsedHtml = unsafeHtml;
213
+ do {
214
+ if (mXSSAttempts === 0) {
215
+ throw new Error('Failed to sanitize html because the input is unstable');
216
+ }
217
+ mXSSAttempts--;
218
+ unsafeHtml = parsedHtml;
219
+ DOM.setInnerHTML(containerEl, unsafeHtml);
220
+ if (DOM.defaultDoc().documentMode) {
221
+ // strip custom-namespaced attributes on IE<=11
222
+ stripCustomNsAttrs(containerEl);
223
+ }
224
+ parsedHtml = DOM.getInnerHTML(containerEl);
225
+ } while (unsafeHtml !== parsedHtml);
226
+ var sanitizer = new SanitizingHtmlSerializer();
227
+ var safeHtml = sanitizer.sanitizeChildren(DOM.getTemplateContent(containerEl) || containerEl);
228
+ // Clear out the body element.
229
+ var parent_1 = DOM.getTemplateContent(containerEl) || containerEl;
230
+ for (var _i = 0, _a = DOM.childNodesAsList(parent_1); _i < _a.length; _i++) {
231
+ var child = _a[_i];
232
+ DOM.removeChild(parent_1, child);
233
+ }
234
+ if (lang_1.assertionsEnabled() && safeHtml !== unsafeHtml) {
235
+ DOM.log('WARNING: sanitizing HTML stripped some content.');
236
+ }
237
+ return safeHtml;
238
+ }
239
+ catch (e) {
240
+ // In case anything goes wrong, clear out inertElement to reset the entire DOM structure.
241
+ inertElement = null;
242
+ throw e;
243
+ }
244
+ }
245
+ exports.sanitizeHtml = sanitizeHtml;
246
+ //# sourceMappingURL=html_sanitizer.js.map
package/src/security/html_sanitizer.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"html_sanitizer.js","sourceRoot":"","sources":["../../../../../modules/@angular/platform-browser/src/security/html_sanitizer.ts"],"names":[],"mappings":";AAAA,4BAAiC,oBAAoB,CAAC,CAAA;AACtD,qBAAgC,gBAAgB,CAAC,CAAA;AAEjD,8BAA0B,iBAAiB,CAAC,CAAA;AAG5C,kGAAkG;AAClG,IAAI,YAAY,GAAgB,IAAI,CAAC;AACrC,2EAA2E;AAC3E,IAAI,GAAG,GAAe,IAAI,CAAC;AAE3B,mGAAmG;AACnG;IACE,EAAE,CAAC,CAAC,YAAY,CAAC;QAAC,MAAM,CAAC,YAAY,CAAC;IACtC,GAAG,GAAG,oBAAM,EAAE,CAAC;IAEf,gDAAgD;IAChD,IAAI,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/C,EAAE,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;QAAC,MAAM,CAAC,UAAU,CAAC;IAE/C,IAAI,GAAG,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACnC,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC;QACzB,gGAAgG;QAChG,sBAAsB;QACtB,IAAI,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACpC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,CAAC,YAAY,CAAC;AACtB,CAAC;AAED,gBAAgB,IAAY;IAC1B,IAAI,GAAG,GAA2B,EAAE,CAAC;IACrC,GAAG,CAAC,CAAU,UAAe,EAAf,KAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAf,cAAe,EAAf,IAAe,CAAC;QAAzB,IAAI,CAAC,SAAA;QAAqB,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC;KAAA;IAC3D,MAAM,CAAC,GAAG,CAAC;AACb,CAAC;AAED;IAAe,cAAiC;SAAjC,WAAiC,CAAjC,sBAAiC,CAAjC,IAAiC;QAAjC,6BAAiC;;IAC9C,IAAI,GAAG,GAA2B,EAAE,CAAC;IACrC,GAAG,CAAC,CAAU,UAAI,EAAJ,aAAI,EAAJ,kBAAI,EAAJ,IAAI,CAAC;QAAd,IAAI,CAAC,aAAA;QACR,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACzC,CAAC;KACF;IACD,MAAM,CAAC,GAAG,CAAC;AACb,CAAC;AAED,oDAAoD;AACpD,uDAAuD;AACvD,uCAAuC;AAEvC,6BAA6B;AAC7B,2DAA2D;AAC3D,IAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEvD,gFAAgF;AAChF,2DAA2D;AAC3D,IAAM,+BAA+B,GAAG,MAAM,CAAC,gDAAgD,CAAC,CAAC;AACjG,IAAM,gCAAgC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AACzD,IAAM,yBAAyB,GAC3B,KAAK,CAAC,gCAAgC,EAAE,+BAA+B,CAAC,CAAC;AAE7E,8BAA8B;AAC9B,IAAM,cAAc,GAAG,KAAK,CACxB,+BAA+B,EAC/B,MAAM,CACF,kBAAkB;IAClB,yFAAyF;IACzF,8DAA8D,CAAC,CAAC,CAAC;AAEzE,0BAA0B;AAC1B,IAAM,eAAe,GAAG,KAAK,CACzB,gCAAgC,EAChC,MAAM,CACF,mBAAmB;IACnB,uFAAuF;IACvF,qDAAqD,CAAC,CAAC,CAAC;AAEhE,IAAM,cAAc,GAChB,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,yBAAyB,CAAC,CAAC;AAErF,2DAA2D;AAC3D,IAAM,SAAS,GAAG,MAAM,CAAC,8CAA8C,CAAC,CAAC;AAEzE,IAAM,UAAU,GAAG,MAAM,CACrB,yEAAyE;IACzE,4EAA4E;IAC5E,+DAA+D;IAC/D,2EAA2E;IAC3E,2BAA2B,CAAC,CAAC;AAEjC,+FAA+F;AAC/F,oGAAoG;AACpG,8DAA8D;AAE9D,iGAAiG;AACjG,mGAAmG;AACnG,qBAAqB;AAErB,IAAM,WAAW,GAAG,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAEjD;;;GAGG;AACH;IAAA;QACU,QAAG,GAAa,EAAE,CAAC;IA+D7B,CAAC;IA7DC,mDAAgB,GAAhB,UAAiB,EAAW;QAC1B,oFAAoF;QACpF,6FAA6F;QAC7F,0DAA0D;QAC1D,IAAI,OAAO,GAAS,EAAE,CAAC,UAAU,CAAC;QAClC,OAAO,OAAO,EAAE,CAAC;YACf,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC5B,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAClC,QAAQ,CAAC;YACX,CAAC;YACD,OAAO,OAAO,EAAE,CAAC;gBACf,wEAAwE;gBACxE,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC7B,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACnC,KAAK,CAAC;gBACR,CAAC;gBACD,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAEO,+CAAY,GAApB,UAAqB,OAAY;QAAjC,iBAmBC;QAlBC,IAAI,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAChC,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAC,KAAa,EAAE,QAAgB;gBAChE,IAAI,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACnC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,CAAC;gBAC/C,iEAAiE;gBACjE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAAC,KAAK,GAAG,2BAAW,CAAC,KAAK,CAAC,CAAC;gBACjD,KAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,KAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,KAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrC,KAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,6CAAU,GAAlB,UAAmB,OAAe;QAChC,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAChC,EAAE,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,wCAAK,GAAb,UAAc,KAAU,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,+BAAC;AAAD,CAAC,AAhED,IAgEC;AAED,sDAAsD;AACtD,IAAM,qBAAqB,GAAG,iCAAiC,CAAC;AAChE,6BAA6B;AAC7B,IAAM,uBAAuB,GAAG,eAAe,CAAC;AAEhD;;;;;;GAMG;AACH,wBAAwB,KAAU,CAAC,iBAAiB;IAClD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SAC9B,OAAO,CACJ,qBAAqB,EACrB,UAAS,KAAU,CAAC,iBAAiB;QACnC,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC;IAC3E,CAAC,CAAC;SACL,OAAO,CACJ,uBAAuB,EACvB,UAAS,KAAU,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;SACvF,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,4BAA4B,EAAO;IACjC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAC,CAAC,EAAE,QAAQ;QACvC,EAAE,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,CAAU,UAAwB,EAAxB,KAAA,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAxB,cAAwB,EAAxB,IAAwB,CAAC;QAAlC,IAAI,CAAC,SAAA;QACR,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;KACjD;AACH,CAAC;AAED;;;GAGG;AACH,sBAA6B,UAAkB;IAC7C,IAAI,CAAC;QACH,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;QACpC,4FAA4F;QAC5F,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAElD,+FAA+F;QAC/F,8FAA8F;QAC9F,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,UAAU,GAAG,UAAU,CAAC;QAE5B,GAAG,CAAC;YACF,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,YAAY,EAAE,CAAC;YAEf,UAAU,GAAG,UAAU,CAAC;YACxB,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC1C,EAAE,CAAC,CAAE,GAAG,CAAC,UAAU,EAAU,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC3C,+CAA+C;gBAC/C,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;YACD,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC,QAAQ,UAAU,KAAK,UAAU,EAAE;QAEpC,IAAI,SAAS,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,CAAC;QAE9F,8BAA8B;QAC9B,IAAI,QAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;QAChE,GAAG,CAAC,CAAc,UAA4B,EAA5B,KAAA,GAAG,CAAC,gBAAgB,CAAC,QAAM,CAAC,EAA5B,cAA4B,EAA5B,IAA4B,CAAC;YAA1C,IAAI,KAAK,SAAA;YACZ,GAAG,CAAC,WAAW,CAAC,QAAM,EAAE,KAAK,CAAC,CAAC;SAChC;QAED,EAAE,CAAC,CAAC,wBAAiB,EAAE,IAAI,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC;IAClB,CAAE;IAAA,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACX,yFAAyF;QACzF,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AA7Ce,oBAAY,eA6C3B,CAAA","sourcesContent":["import {DomAdapter, getDOM} from '../dom/dom_adapter';\nimport {assertionsEnabled} from '../facade/lang';\n\nimport {sanitizeUrl} from './url_sanitizer';\n\n\n/** A <body> element that can be safely used to parse untrusted HTML. Lazily initialized below. */\nlet inertElement: HTMLElement = null;\n/** Lazily initialized to make sure the DOM adapter gets set before use. */\nlet DOM: DomAdapter = null;\n\n/** Returns an HTML element that is guaranteed to not execute code when creating elements in it. */\nfunction getInertElement() {\n if (inertElement) return inertElement;\n DOM = getDOM();\n\n // Prefer using <template> element if supported.\n let templateEl = DOM.createElement('template');\n if ('content' in templateEl) return templateEl;\n\n let doc = DOM.createHtmlDocument();\n inertElement = DOM.querySelector(doc, 'body');\n if (inertElement == null) {\n // usually there should be only one body element in the document, but IE doesn't have any, so we\n // need to create one.\n let html = DOM.createElement('html', doc);\n inertElement = DOM.createElement('body', doc);\n DOM.appendChild(html, inertElement);\n DOM.appendChild(doc, html);\n }\n return inertElement;\n}\n\nfunction tagSet(tags: string): {[k: string]: boolean} {\n let res: {[k: string]: boolean} = {};\n for (let t of tags.split(',')) res[t.toLowerCase()] = true;\n return res;\n}\n\nfunction merge(...sets: {[k: string]: boolean}[]): {[k: string]: boolean} {\n let res: {[k: string]: boolean} = {};\n for (let s of sets) {\n for (let v in s) {\n if (s.hasOwnProperty(v)) res[v] = true;\n }\n }\n return res;\n}\n\n// Good source of info about elements and attributes\n// http://dev.w3.org/html5/spec/Overview.html#semantics\n// http://simon.html5.org/html-elements\n\n// Safe Void Elements - HTML5\n// http://dev.w3.org/html5/spec/Overview.html#void-elements\nconst VOID_ELEMENTS = tagSet('area,br,col,hr,img,wbr');\n\n// Elements that you can, intentionally, leave open (and which close themselves)\n// http://dev.w3.org/html5/spec/Overview.html#optional-tags\nconst OPTIONAL_END_TAG_BLOCK_ELEMENTS = tagSet('colgroup,dd,dt,li,p,tbody,td,tfoot,th,thead,tr');\nconst OPTIONAL_END_TAG_INLINE_ELEMENTS = tagSet('rp,rt');\nconst OPTIONAL_END_TAG_ELEMENTS =\n merge(OPTIONAL_END_TAG_INLINE_ELEMENTS, OPTIONAL_END_TAG_BLOCK_ELEMENTS);\n\n// Safe Block Elements - HTML5\nconst BLOCK_ELEMENTS = merge(\n OPTIONAL_END_TAG_BLOCK_ELEMENTS,\n tagSet(\n 'address,article,' +\n 'aside,blockquote,caption,center,del,dir,div,dl,figure,figcaption,footer,h1,h2,h3,h4,h5,' +\n 'h6,header,hgroup,hr,ins,map,menu,nav,ol,pre,section,table,ul'));\n\n// Inline Elements - HTML5\nconst INLINE_ELEMENTS = merge(\n OPTIONAL_END_TAG_INLINE_ELEMENTS,\n tagSet(\n 'a,abbr,acronym,b,' +\n 'bdi,bdo,big,br,cite,code,del,dfn,em,font,i,img,ins,kbd,label,map,mark,q,ruby,rp,rt,s,' +\n 'samp,small,span,strike,strong,sub,sup,time,tt,u,var'));\n\nconst VALID_ELEMENTS =\n merge(VOID_ELEMENTS, BLOCK_ELEMENTS, INLINE_ELEMENTS, OPTIONAL_END_TAG_ELEMENTS);\n\n// Attributes that have href and hence need to be sanitized\nconst URI_ATTRS = tagSet('background,cite,href,longdesc,src,xlink:href');\n\nconst HTML_ATTRS = tagSet(\n 'abbr,align,alt,axis,bgcolor,border,cellpadding,cellspacing,class,clear,' +\n 'color,cols,colspan,compact,coords,dir,face,headers,height,hreflang,hspace,' +\n 'ismap,lang,language,nohref,nowrap,rel,rev,rows,rowspan,rules,' +\n 'scope,scrolling,shape,size,span,start,summary,tabindex,target,title,type,' +\n 'valign,value,vspace,width');\n\n// NB: This currently conciously doesn't support SVG. SVG sanitization has had several security\n// issues in the past, so it seems safer to leave it out if possible. If support for binding SVG via\n// innerHTML is required, SVG attributes should be added here.\n\n// NB: Sanitization does not allow <form> elements or other active elements (<button> etc). Those\n// can be sanitized, but they increase security surface area without a legitimate use case, so they\n// are left out here.\n\nconst VALID_ATTRS = merge(URI_ATTRS, HTML_ATTRS);\n\n/**\n * SanitizingHtmlSerializer serializes a DOM fragment, stripping out any unsafe elements and unsafe\n * attributes.\n */\nclass SanitizingHtmlSerializer {\n private buf: string[] = [];\n\n sanitizeChildren(el: Element): string {\n // This cannot use a TreeWalker, as it has to run on Angular's various DOM adapters.\n // However this code never accesses properties off of `document` before deleting its contents\n // again, so it shouldn't be vulnerable to DOM clobbering.\n let current: Node = el.firstChild;\n while (current) {\n if (DOM.isElementNode(current)) {\n this.startElement(current);\n } else if (DOM.isTextNode(current)) {\n this.chars(DOM.nodeValue(current));\n }\n if (DOM.firstChild(current)) {\n current = DOM.firstChild(current);\n continue;\n }\n while (current) {\n // Leaving the element. Walk up and to the right, closing tags as we go.\n if (DOM.isElementNode(current)) {\n this.endElement(DOM.nodeName(current).toLowerCase());\n }\n if (DOM.nextSibling(current)) {\n current = DOM.nextSibling(current);\n break;\n }\n current = DOM.parentElement(current);\n }\n }\n return this.buf.join('');\n }\n\n private startElement(element: any) {\n let tagName = DOM.nodeName(element).toLowerCase();\n tagName = tagName.toLowerCase();\n if (VALID_ELEMENTS.hasOwnProperty(tagName)) {\n this.buf.push('<');\n this.buf.push(tagName);\n DOM.attributeMap(element).forEach((value: string, attrName: string) => {\n let lower = attrName.toLowerCase();\n if (!VALID_ATTRS.hasOwnProperty(lower)) return;\n // TODO(martinprobst): Special case image URIs for data:image/...\n if (URI_ATTRS[lower]) value = sanitizeUrl(value);\n this.buf.push(' ');\n this.buf.push(attrName);\n this.buf.push('=\"');\n this.buf.push(encodeEntities(value));\n this.buf.push('\"');\n });\n this.buf.push('>');\n }\n }\n\n private endElement(tagName: string) {\n tagName = tagName.toLowerCase();\n if (VALID_ELEMENTS.hasOwnProperty(tagName) && !VOID_ELEMENTS.hasOwnProperty(tagName)) {\n this.buf.push('</');\n this.buf.push(tagName);\n this.buf.push('>');\n }\n }\n\n private chars(chars: any /** TODO #9100 */) { this.buf.push(encodeEntities(chars)); }\n}\n\n// Regular Expressions for parsing tags and attributes\nconst SURROGATE_PAIR_REGEXP = /[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]/g;\n// ! to ~ is the ASCII range.\nconst NON_ALPHANUMERIC_REGEXP = /([^\\#-~ |!])/g;\n\n/**\n * Escapes all potentially dangerous characters, so that the\n * resulting string can be safely inserted into attribute or\n * element text.\n * @param value\n * @returns {string} escaped text\n */\nfunction encodeEntities(value: any /** TODO #9100 */) {\n return value.replace(/&/g, '&amp;')\n .replace(\n SURROGATE_PAIR_REGEXP,\n function(match: any /** TODO #9100 */) {\n let hi = match.charCodeAt(0);\n let low = match.charCodeAt(1);\n return '&#' + (((hi - 0xD800) * 0x400) + (low - 0xDC00) + 0x10000) + ';';\n })\n .replace(\n NON_ALPHANUMERIC_REGEXP,\n function(match: any /** TODO #9100 */) { return '&#' + match.charCodeAt(0) + ';'; })\n .replace(/</g, '&lt;')\n .replace(/>/g, '&gt;');\n}\n\n/**\n * When IE9-11 comes across an unknown namespaced attribute e.g. 'xlink:foo' it adds 'xmlns:ns1'\n * attribute to declare ns1 namespace and prefixes the attribute with 'ns1' (e.g. 'ns1:xlink:foo').\n *\n * This is undesirable since we don't want to allow any of these custom attributes. This method\n * strips them all.\n */\nfunction stripCustomNsAttrs(el: any) {\n DOM.attributeMap(el).forEach((_, attrName) => {\n if (attrName === 'xmlns:ns1' || attrName.indexOf('ns1:') === 0) {\n DOM.removeAttribute(el, attrName);\n }\n });\n for (let n of DOM.childNodesAsList(el)) {\n if (DOM.isElementNode(n)) stripCustomNsAttrs(n);\n }\n}\n\n/**\n * Sanitizes the given unsafe, untrusted HTML fragment, and returns HTML text that is safe to add to\n * the DOM in a browser environment.\n */\nexport function sanitizeHtml(unsafeHtml: string): string {\n try {\n let containerEl = getInertElement();\n // Make sure unsafeHtml is actually a string (TypeScript types are not enforced at runtime).\n unsafeHtml = unsafeHtml ? String(unsafeHtml) : '';\n\n // mXSS protection. Repeatedly parse the document to make sure it stabilizes, so that a browser\n // trying to auto-correct incorrect HTML cannot cause formerly inert HTML to become dangerous.\n let mXSSAttempts = 5;\n let parsedHtml = unsafeHtml;\n\n do {\n if (mXSSAttempts === 0) {\n throw new Error('Failed to sanitize html because the input is unstable');\n }\n mXSSAttempts--;\n\n unsafeHtml = parsedHtml;\n DOM.setInnerHTML(containerEl, unsafeHtml);\n if ((DOM.defaultDoc() as any).documentMode) {\n // strip custom-namespaced attributes on IE<=11\n stripCustomNsAttrs(containerEl);\n }\n parsedHtml = DOM.getInnerHTML(containerEl);\n } while (unsafeHtml !== parsedHtml);\n\n let sanitizer = new SanitizingHtmlSerializer();\n let safeHtml = sanitizer.sanitizeChildren(DOM.getTemplateContent(containerEl) || containerEl);\n\n // Clear out the body element.\n let parent = DOM.getTemplateContent(containerEl) || containerEl;\n for (let child of DOM.childNodesAsList(parent)) {\n DOM.removeChild(parent, child);\n }\n\n if (assertionsEnabled() && safeHtml !== unsafeHtml) {\n DOM.log('WARNING: sanitizing HTML stripped some content.');\n }\n\n return safeHtml;\n } catch (e) {\n // In case anything goes wrong, clear out inertElement to reset the entire DOM structure.\n inertElement = null;\n throw e;\n }\n}\n\ninterface DecoratorInvocation {\n type: Function;\n args?: any[];\n}\n"]}
package/src/security/style_sanitizer.d.ts ADDED
@@ -0,0 +1,5 @@
1
+ /**
2
+ * Sanitizes the given untrusted CSS style property value (i.e. not an entire object, just a single
3
+ * value) and returns a value that is safe to use in a browser environment.
4
+ */
5
+ export declare function sanitizeStyle(value: string): string;
package/src/security/style_sanitizer.js ADDED
@@ -0,0 +1,83 @@
1
+ "use strict";
2
+ var dom_adapter_1 = require('../dom/dom_adapter');
3
+ var lang_1 = require('../facade/lang');
4
+ var url_sanitizer_1 = require('./url_sanitizer');
5
+ /**
6
+ * Regular expression for safe style values.
7
+ *
8
+ * Quotes (" and ') are allowed, but a check must be done elsewhere to ensure they're balanced.
9
+ *
10
+ * ',' allows multiple values to be assigned to the same property (e.g. background-attachment or
11
+ * font-family) and hence could allow multiple values to get injected, but that should pose no risk
12
+ * of XSS.
13
+ *
14
+ * The function expression checks only for XSS safety, not for CSS validity.
15
+ *
16
+ * This regular expression was taken from the Closure sanitization library, and augmented for
17
+ * transformation values.
18
+ */
19
+ var VALUES = '[-,."\'%_!# a-zA-Z0-9]+';
20
+ var TRANSFORMATION_FNS = '(?:matrix|translate|scale|rotate|skew|perspective)(?:X|Y|3d)?';
21
+ var COLOR_FNS = '(?:rgb|hsl)a?';
22
+ var FN_ARGS = '\\([-0-9.%, a-zA-Z]+\\)';
23
+ var SAFE_STYLE_VALUE = new RegExp("^(" + VALUES + "|(?:" + TRANSFORMATION_FNS + "|" + COLOR_FNS + ")" + FN_ARGS + ")$", 'g');
24
+ /**
25
+ * Matches a `url(...)` value with an arbitrary argument as long as it does
26
+ * not contain parentheses.
27
+ *
28
+ * The URL value still needs to be sanitized separately.
29
+ *
30
+ * `url(...)` values are a very common use case, e.g. for `background-image`. With carefully crafted
31
+ * CSS style rules, it is possible to construct an information leak with `url` values in CSS, e.g.
32
+ * by observing whether scroll bars are displayed, or character ranges used by a font face
33
+ * definition.
34
+ *
35
+ * Angular only allows binding CSS values (as opposed to entire CSS rules), so it is unlikely that
36
+ * binding a URL value without further cooperation from the page will cause an information leak, and
37
+ * if so, it is just a leak, not a full blown XSS vulnerability.
38
+ *
39
+ * Given the common use case, low likelihood of attack vector, and low impact of an attack, this
40
+ * code is permissive and allows URLs that sanitize otherwise.
41
+ */
42
+ var URL_RE = /^url\(([^)]+)\)$/;
43
+ /**
44
+ * Checks that quotes (" and ') are properly balanced inside a string. Assumes
45
+ * that neither escape (\) nor any other character that could result in
46
+ * breaking out of a string parsing context are allowed;
47
+ * see http://www.w3.org/TR/css3-syntax/#string-token-diagram.
48
+ *
49
+ * This code was taken from the Closure sanitization library.
50
+ */
51
+ function hasBalancedQuotes(value) {
52
+ var outsideSingle = true;
53
+ var outsideDouble = true;
54
+ for (var i = 0; i < value.length; i++) {
55
+ var c = value.charAt(i);
56
+ if (c === '\'' && outsideDouble) {
57
+ outsideSingle = !outsideSingle;
58
+ }
59
+ else if (c === '"' && outsideSingle) {
60
+ outsideDouble = !outsideDouble;
61
+ }
62
+ }
63
+ return outsideSingle && outsideDouble;
64
+ }
65
+ /**
66
+ * Sanitizes the given untrusted CSS style property value (i.e. not an entire object, just a single
67
+ * value) and returns a value that is safe to use in a browser environment.
68
+ */
69
+ function sanitizeStyle(value) {
70
+ value = String(value).trim(); // Make sure it's actually a string.
71
+ // Single url(...) values are supported, but only for URLs that sanitize cleanly. See above for
72
+ // reasoning behind this.
73
+ var urlMatch = URL_RE.exec(value);
74
+ if ((urlMatch && url_sanitizer_1.sanitizeUrl(urlMatch[1]) === urlMatch[1]) ||
75
+ value.match(SAFE_STYLE_VALUE) && hasBalancedQuotes(value)) {
76
+ return value; // Safe style values.
77
+ }
78
+ if (lang_1.assertionsEnabled())
79
+ dom_adapter_1.getDOM().log('WARNING: sanitizing unsafe style value ' + value);
80
+ return 'unsafe';
81
+ }
82
+ exports.sanitizeStyle = sanitizeStyle;
83
+ //# sourceMappingURL=style_sanitizer.js.map
package/src/security/style_sanitizer.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"style_sanitizer.js","sourceRoot":"","sources":["../../../../../modules/@angular/platform-browser/src/security/style_sanitizer.ts"],"names":[],"mappings":";AAAA,4BAAqB,oBAAoB,CAAC,CAAA;AAC1C,qBAAgC,gBAAgB,CAAC,CAAA;AAEjD,8BAA0B,iBAAiB,CAAC,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACH,IAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,IAAM,kBAAkB,GAAG,+DAA+D,CAAC;AAC3F,IAAM,SAAS,GAAG,eAAe,CAAC;AAClC,IAAM,OAAO,GAAG,yBAAyB,CAAC;AAC1C,IAAM,gBAAgB,GAClB,IAAI,MAAM,CAAC,OAAK,MAAM,YAAO,kBAAkB,SAAI,SAAS,SAAI,OAAO,OAAI,EAAE,GAAG,CAAC,CAAC;AAEtF;;;;;;;;;;;;;;;;;GAiBG;AACH,IAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC;;;;;;;GAOG;AACH,2BAA2B,KAAa;IACtC,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC;YAChC,aAAa,GAAG,CAAC,aAAa,CAAC;QACjC,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC;YACtC,aAAa,GAAG,CAAC,aAAa,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,CAAC,aAAa,IAAI,aAAa,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,uBAA8B,KAAa;IACzC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAE,oCAAoC;IAEnE,+FAA+F;IAC/F,yBAAyB;IACzB,IAAI,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,2BAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAE,qBAAqB;IACtC,CAAC;IAED,EAAE,CAAC,CAAC,wBAAiB,EAAE,CAAC;QAAC,oBAAM,EAAE,CAAC,GAAG,CAAC,yCAAyC,GAAG,KAAK,CAAC,CAAC;IAEzF,MAAM,CAAC,QAAQ,CAAC;AAClB,CAAC;AAde,qBAAa,gBAc5B,CAAA","sourcesContent":["import {getDOM} from '../dom/dom_adapter';\nimport {assertionsEnabled} from '../facade/lang';\n\nimport {sanitizeUrl} from './url_sanitizer';\n\n/**\n * Regular expression for safe style values.\n *\n * Quotes (\" and ') are allowed, but a check must be done elsewhere to ensure they're balanced.\n *\n * ',' allows multiple values to be assigned to the same property (e.g. background-attachment or\n * font-family) and hence could allow multiple values to get injected, but that should pose no risk\n * of XSS.\n *\n * The function expression checks only for XSS safety, not for CSS validity.\n *\n * This regular expression was taken from the Closure sanitization library, and augmented for\n * transformation values.\n */\nconst VALUES = '[-,.\"\\'%_!# a-zA-Z0-9]+';\nconst TRANSFORMATION_FNS = '(?:matrix|translate|scale|rotate|skew|perspective)(?:X|Y|3d)?';\nconst COLOR_FNS = '(?:rgb|hsl)a?';\nconst FN_ARGS = '\\\\([-0-9.%, a-zA-Z]+\\\\)';\nconst SAFE_STYLE_VALUE =\n new RegExp(`^(${VALUES}|(?:${TRANSFORMATION_FNS}|${COLOR_FNS})${FN_ARGS})$`, 'g');\n\n/**\n * Matches a `url(...)` value with an arbitrary argument as long as it does\n * not contain parentheses.\n *\n * The URL value still needs to be sanitized separately.\n *\n * `url(...)` values are a very common use case, e.g. for `background-image`. With carefully crafted\n * CSS style rules, it is possible to construct an information leak with `url` values in CSS, e.g.\n * by observing whether scroll bars are displayed, or character ranges used by a font face\n * definition.\n *\n * Angular only allows binding CSS values (as opposed to entire CSS rules), so it is unlikely that\n * binding a URL value without further cooperation from the page will cause an information leak, and\n * if so, it is just a leak, not a full blown XSS vulnerability.\n *\n * Given the common use case, low likelihood of attack vector, and low impact of an attack, this\n * code is permissive and allows URLs that sanitize otherwise.\n */\nconst URL_RE = /^url\\(([^)]+)\\)$/;\n\n/**\n * Checks that quotes (\" and ') are properly balanced inside a string. Assumes\n * that neither escape (\\) nor any other character that could result in\n * breaking out of a string parsing context are allowed;\n * see http://www.w3.org/TR/css3-syntax/#string-token-diagram.\n *\n * This code was taken from the Closure sanitization library.\n */\nfunction hasBalancedQuotes(value: string) {\n let outsideSingle = true;\n let outsideDouble = true;\n for (let i = 0; i < value.length; i++) {\n let c = value.charAt(i);\n if (c === '\\'' && outsideDouble) {\n outsideSingle = !outsideSingle;\n } else if (c === '\"' && outsideSingle) {\n outsideDouble = !outsideDouble;\n }\n }\n return outsideSingle && outsideDouble;\n}\n\n/**\n * Sanitizes the given untrusted CSS style property value (i.e. not an entire object, just a single\n * value) and returns a value that is safe to use in a browser environment.\n */\nexport function sanitizeStyle(value: string): string {\n value = String(value).trim(); // Make sure it's actually a string.\n\n // Single url(...) values are supported, but only for URLs that sanitize cleanly. See above for\n // reasoning behind this.\n let urlMatch = URL_RE.exec(value);\n if ((urlMatch && sanitizeUrl(urlMatch[1]) === urlMatch[1]) ||\n value.match(SAFE_STYLE_VALUE) && hasBalancedQuotes(value)) {\n return value; // Safe style values.\n }\n\n if (assertionsEnabled()) getDOM().log('WARNING: sanitizing unsafe style value ' + value);\n\n return 'unsafe';\n}\n\ninterface DecoratorInvocation {\n type: Function;\n args?: any[];\n}\n"]}
package/src/security/url_sanitizer.d.ts ADDED
@@ -0,0 +1 @@
1
+ export declare function sanitizeUrl(url: string): string;
package/src/security/url_sanitizer.js ADDED
@@ -0,0 +1,42 @@
1
+ "use strict";
2
+ var dom_adapter_1 = require('../dom/dom_adapter');
3
+ var lang_1 = require('../facade/lang');
4
+ /**
5
+ * A pattern that recognizes a commonly useful subset of URLs that are safe.
6
+ *
7
+ * This regular expression matches a subset of URLs that will not cause script
8
+ * execution if used in URL context within a HTML document. Specifically, this
9
+ * regular expression matches if (comment from here on and regex copied from
10
+ * Soy's EscapingConventions):
11
+ * (1) Either a protocol in a whitelist (http, https, mailto or ftp).
12
+ * (2) or no protocol. A protocol must be followed by a colon. The below
13
+ * allows that by allowing colons only after one of the characters [/?#].
14
+ * A colon after a hash (#) must be in the fragment.
15
+ * Otherwise, a colon after a (?) must be in a query.
16
+ * Otherwise, a colon after a single solidus (/) must be in a path.
17
+ * Otherwise, a colon after a double solidus (//) must be in the authority
18
+ * (before port).
19
+ *
20
+ * The pattern disallows &, used in HTML entity declarations before
21
+ * one of the characters in [/?#]. This disallows HTML entities used in the
22
+ * protocol name, which should never happen, e.g. "h&#116;tp" for "http".
23
+ * It also disallows HTML entities in the first path part of a relative path,
24
+ * e.g. "foo&lt;bar/baz". Our existing escaping functions should not produce
25
+ * that. More importantly, it disallows masking of a colon,
26
+ * e.g. "javascript&#58;...".
27
+ *
28
+ * This regular expression was taken from the Closure sanitization library.
29
+ */
30
+ var SAFE_URL_PATTERN = /^(?:(?:https?|mailto|ftp|tel|file):|[^&:/?#]*(?:[/?#]|$))/gi;
31
+ /** A pattern that matches safe data URLs. Only matches image and video types. */
32
+ var DATA_URL_PATTERN = /^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm));base64,[a-z0-9+\/]+=*$/i;
33
+ function sanitizeUrl(url) {
34
+ url = String(url);
35
+ if (url.match(SAFE_URL_PATTERN) || url.match(DATA_URL_PATTERN))
36
+ return url;
37
+ if (lang_1.assertionsEnabled())
38
+ dom_adapter_1.getDOM().log('WARNING: sanitizing unsafe URL value ' + url);
39
+ return 'unsafe:' + url;
40
+ }
41
+ exports.sanitizeUrl = sanitizeUrl;
42
+ //# sourceMappingURL=url_sanitizer.js.map
package/src/security/url_sanitizer.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"url_sanitizer.js","sourceRoot":"","sources":["../../../../../modules/@angular/platform-browser/src/security/url_sanitizer.ts"],"names":[],"mappings":";AAAA,4BAAqB,oBAAoB,CAAC,CAAA;AAC1C,qBAAgC,gBAAgB,CAAC,CAAA;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,IAAM,gBAAgB,GAAG,6DAA6D,CAAC;AAEvF,iFAAiF;AACjF,IAAM,gBAAgB,GAClB,0GAA0G,CAAC;AAE/G,qBAA4B,GAAW;IACrC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC;IAE3E,EAAE,CAAC,CAAC,wBAAiB,EAAE,CAAC;QAAC,oBAAM,EAAE,CAAC,GAAG,CAAC,uCAAuC,GAAG,GAAG,CAAC,CAAC;IAErF,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;AACzB,CAAC;AAPe,mBAAW,cAO1B,CAAA","sourcesContent":["import {getDOM} from '../dom/dom_adapter';\nimport {assertionsEnabled} from '../facade/lang';\n\n/**\n * A pattern that recognizes a commonly useful subset of URLs that are safe.\n *\n * This regular expression matches a subset of URLs that will not cause script\n * execution if used in URL context within a HTML document. Specifically, this\n * regular expression matches if (comment from here on and regex copied from\n * Soy's EscapingConventions):\n * (1) Either a protocol in a whitelist (http, https, mailto or ftp).\n * (2) or no protocol. A protocol must be followed by a colon. The below\n * allows that by allowing colons only after one of the characters [/?#].\n * A colon after a hash (#) must be in the fragment.\n * Otherwise, a colon after a (?) must be in a query.\n * Otherwise, a colon after a single solidus (/) must be in a path.\n * Otherwise, a colon after a double solidus (//) must be in the authority\n * (before port).\n *\n * The pattern disallows &, used in HTML entity declarations before\n * one of the characters in [/?#]. This disallows HTML entities used in the\n * protocol name, which should never happen, e.g. \"h&#116;tp\" for \"http\".\n * It also disallows HTML entities in the first path part of a relative path,\n * e.g. \"foo&lt;bar/baz\". Our existing escaping functions should not produce\n * that. More importantly, it disallows masking of a colon,\n * e.g. \"javascript&#58;...\".\n *\n * This regular expression was taken from the Closure sanitization library.\n */\nconst SAFE_URL_PATTERN = /^(?:(?:https?|mailto|ftp|tel|file):|[^&:/?#]*(?:[/?#]|$))/gi;\n\n/** A pattern that matches safe data URLs. Only matches image and video types. */\nconst DATA_URL_PATTERN =\n /^data:(?:image\\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\\/(?:mpeg|mp4|ogg|webm));base64,[a-z0-9+\\/]+=*$/i;\n\nexport function sanitizeUrl(url: string): string {\n url = String(url);\n if (url.match(SAFE_URL_PATTERN) || url.match(DATA_URL_PATTERN)) return url;\n\n if (assertionsEnabled()) getDOM().log('WARNING: sanitizing unsafe URL value ' + url);\n\n return 'unsafe:' + url;\n}\n\ninterface DecoratorInvocation {\n type: Function;\n args?: any[];\n}\n"]}
package/src/web_workers/shared/api.d.ts ADDED
@@ -0,0 +1,2 @@
1
+ import { OpaqueToken } from '@angular/core';
2
+ export declare const ON_WEB_WORKER: OpaqueToken;
package/src/web_workers/shared/api.js ADDED
@@ -0,0 +1,4 @@
1
+ "use strict";
2
+ var core_1 = require('@angular/core');
3
+ exports.ON_WEB_WORKER = new core_1.OpaqueToken('WebWorker.onWebWorker');
4
+ //# sourceMappingURL=api.js.map
package/src/web_workers/shared/api.js.map ADDED
@@ -0,0 +1 @@
1
+ {"version":3,"file":"api.js","sourceRoot":"","sources":["../../../../../../modules/@angular/platform-browser/src/web_workers/shared/api.ts"],"names":[],"mappings":";AAAA,qBAA0B,eAAe,CAAC,CAAA;AAE7B,qBAAa,GAAG,IAAI,kBAAW,CAAC,uBAAuB,CAAC,CAAC","sourcesContent":["import {OpaqueToken} from '@angular/core';\n\nexport const ON_WEB_WORKER = new OpaqueToken('WebWorker.onWebWorker');\n\ninterface DecoratorInvocation {\n type: Function;\n args?: any[];\n}\n"]}
package/src/web_workers/shared/api.metadata.json ADDED
@@ -0,0 +1 @@
1
+ {"__symbolic":"module","version":1,"metadata":{"ON_WEB_WORKER":{"__symbolic":"new","expression":{"__symbolic":"reference","module":"@angular/core","name":"OpaqueToken"},"arguments":["WebWorker.onWebWorker"]}}}
package/src/web_workers/shared/client_message_broker.d.ts ADDED
@@ -0,0 +1,51 @@
1
+ import { Type } from '@angular/core';
2
+ import { MessageBus } from './message_bus';
3
+ import { Serializer } from './serializer';
4
+ /**
5
+ * @experimental
6
+ */
7
+ export declare abstract class ClientMessageBrokerFactory {
8
+ /**
9
+ * Initializes the given channel and attaches a new {@link ClientMessageBroker} to it.
10
+ */
11
+ abstract createMessageBroker(channel: string, runInZone?: boolean): ClientMessageBroker;
12
+ }
13
+ export declare class ClientMessageBrokerFactory_ extends ClientMessageBrokerFactory {
14
+ private _messageBus;
15
+ constructor(_messageBus: MessageBus, _serializer: Serializer);
16
+ /**
17
+ * Initializes the given channel and attaches a new {@link ClientMessageBroker} to it.
18
+ */
19
+ createMessageBroker(channel: string, runInZone?: boolean): ClientMessageBroker;
20
+ }
21
+ /**
22
+ * @experimental
23
+ */
24
+ export declare abstract class ClientMessageBroker {
25
+ abstract runOnService(args: UiArguments, returnType: Type): Promise<any>;
26
+ }
27
+ export declare class ClientMessageBroker_ extends ClientMessageBroker {
28
+ channel: any;
29
+ private _pending;
30
+ private _sink;
31
+ constructor(messageBus: MessageBus, _serializer: Serializer, channel: any);
32
+ private _generateMessageId(name);
33
+ runOnService(args: UiArguments, returnType: Type): Promise<any>;
34
+ private _handleMessage(message);
35
+ }
36
+ /**
37
+ * @experimental
38
+ */
39
+ export declare class FnArg {
40
+ value: any;
41
+ type: Type;
42
+ constructor(value: any, type: Type);
43
+ }
44
+ /**
45
+ * @experimental
46
+ */
47
+ export declare class UiArguments {
48
+ method: string;
49
+ args: FnArg[];
50
+ constructor(method: string, args?: FnArg[]);
51
+ }