Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't rewrite values of binding attributes in sanitizer.js #12688

Merged
merged 2 commits into from Jan 8, 2018

Conversation

dreamofabear
Copy link

Fixes #12610.

  • Values of binding attributes like [href] are expressions, not scalars, and should not be modified.

/to @jridgewell @danielrozenberg

@dreamofabear dreamofabear merged commit 2d1c22e into ampproject:master Jan 8, 2018
@dreamofabear dreamofabear deleted the href-binding-sanitizer branch January 8, 2018 19:26
dreamofabear pushed a commit that referenced this pull request Jan 8, 2018
* fix incorrect rewriting of [href] attr vals in sanitizer

* lint
gzgogo pushed a commit to gzgogo/amphtml that referenced this pull request Jan 26, 2018
…t#12688)

* fix incorrect rewriting of [href] attr vals in sanitizer

* lint
RanAbram pushed a commit to RanAbram/amphtml that referenced this pull request Mar 12, 2018
…t#12688)

* fix incorrect rewriting of [href] attr vals in sanitizer

* lint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants