diff options
| author | Peter Bacon Darwin | 2014-02-21 19:37:37 +0000 |
|---|---|---|
| committer | Peter Bacon Darwin | 2014-02-21 19:37:37 +0000 |
| commit | 4a6a3ba7fb08ce99007893ef75365a3e8aff938a (patch) | |
| tree | ef12f95d2c48862c08e091588a1137a60870012b /docs/content/error/$sce/insecurl.ngdoc | |
| parent | 0c9abc32c088bf88ef3d390ac080b5eade40f07c (diff) | |
| download | angular.js-4a6a3ba7fb08ce99007893ef75365a3e8aff938a.tar.bz2 | |
docs(*): fix anchors for members in api docs
Diffstat (limited to 'docs/content/error/$sce/insecurl.ngdoc')
| -rw-r--r-- | docs/content/error/$sce/insecurl.ngdoc | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/docs/content/error/$sce/insecurl.ngdoc b/docs/content/error/$sce/insecurl.ngdoc index 67bbb2b6..9691e2b5 100644 --- a/docs/content/error/$sce/insecurl.ngdoc +++ b/docs/content/error/$sce/insecurl.ngdoc @@ -8,16 +8,16 @@ AngularJS' {@link ng.$sce Strict Contextual Escaping (SCE)} mode (enabled by def Typically, this would occur if you're attempting to load an Angular template from an untrusted source. It's also possible that a custom directive threw this error for a similar reason. -Angular only loads templates from trusted URLs (by calling {@link ng.$sce#methods_getTrustedResourceUrl $sce.getTrustedResourceUrl} on the template URL). +Angular only loads templates from trusted URLs (by calling {@link ng.$sce#getTrustedResourceUrl $sce.getTrustedResourceUrl} on the template URL). By default, only URLs that belong to the same origin are trusted. These are urls with the same domain and protocol as the application document. The {@link ng.directive:ngInclude ngInclude} directive and {@link guide/directive directives} that specify a `templateUrl` require a trusted resource URL. To load templates from other domains and/or protocols, either adjust the {@link -api/ng.$sceDelegateProvider#methods_resourceUrlWhitelist whitelist}/ {@link -api/ng.$sceDelegateProvider#methods_resourceUrlBlacklist blacklist} or wrap the URL with a call to {@link -api/ng.$sce#methods_trustAsResourceUrl $sce.trustAsResourceUrl}. +api/ng.$sceDelegateProvider#resourceUrlWhitelist whitelist}/ {@link +api/ng.$sceDelegateProvider#resourceUrlBlacklist blacklist} or wrap the URL with a call to {@link +api/ng.$sce#trustAsResourceUrl $sce.trustAsResourceUrl}. **Note**: The browser's [Same Origin Policy](https://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_XMLHttpRequest) and |