Skip to content

Commit

Permalink
docs: update security guide link references (#55514)
Browse files Browse the repository at this point in the history
PR Close #55514
  • Loading branch information
bencodezen authored and AndrewKushnir committed Apr 25, 2024
1 parent 0b53fdb commit a45a640
Show file tree
Hide file tree
Showing 4 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion adev/src/content/guide/components/dom-apis.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,4 +80,4 @@ Avoid inserting, removing, and modifying DOM elements. In particular, **never di
element's `innerHTML` property**, which can make your application vulnerable
to [cross-site scripting (XSS) exploits](https://developer.mozilla.org/en-US/docs/Glossary/Cross-site_scripting).
Angular's template bindings, including bindings for `innerHTML`, include safeguards that help
protect against XSS attacks. See the [Security guide](guide/security) for details.
protect against XSS attacks. See the [Security guide](best-practices/security) for details.
2 changes: 1 addition & 1 deletion adev/src/content/guide/templates/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ However, because an Angular template is part of an overall webpage, and not the

IMPORTANT: To eliminate the risk of script injection attacks, Angular does not support the `<script>` element in templates.
Angular ignores the `<script>` tag and outputs a warning to the browser console.
For more information, see the [Security](guide/security) page.
For more information, see the [Security](best-practices/security) page.

## More on template syntax

Expand Down
2 changes: 1 addition & 1 deletion adev/src/content/introduction/what-is-angular.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ more">
Angular's internationalization features handles message translations and formatting, including
support for unicode standard ICU syntax.
</docs-card>
<docs-card title="Protect your users with security by default" href="guide/security" link="Security">
<docs-card title="Protect your users with security by default" href="best-practices/security" link="Security">
In collaboration with Google's world-class security engineers, Angular aims to make development
safe by default. Built-in security features, including HTML sanitization and
trusted type support, help protect your users from common vulnerabilities like
Expand Down
2 changes: 1 addition & 1 deletion adev/src/content/reference/roadmap.md
Original file line number Diff line number Diff line change
Expand Up @@ -222,7 +222,7 @@ This section represents explorations and prototyping of potential future project
<docs-card title="Transition the Angular language service to Ivy" link="Completed Q2 2021" href="tools/language-service">
The goal of this project is to improve the experience and remove legacy dependency by transitioning the language service to Ivy. Today the language service still uses the View Engine compiler and type checking, even for Ivy apps. We want to use the Ivy template parser and improved type checking for the Angular Language service to match app behavior. This migration is also a step towards unblocking the removal of View Engine, which will simplify Angular, reduce the npm package size, and improve the maintainability of the framework.
</docs-card>
<docs-card title="Increased security with native Trusted Types in Angular" link="Completed Q2 2021" href="guide/security">
<docs-card title="Increased security with native Trusted Types in Angular" link="Completed Q2 2021" href="best-practices/security">
In collaboration with the Google security team, we are adding support for the new Trusted Types API. This web platform API helps developers build more secure web apps.
</docs-card>
<docs-card title="Optimized build speed and bundle sizes with Angular CLI webpack 5" link="Completed Q2 2021" href="tools/cli/build">
Expand Down

0 comments on commit a45a640

Please sign in to comment.