diff options
| author | Pete Bacon Darwin | 2013-07-12 09:29:06 +0100 |
|---|---|---|
| committer | Pete Bacon Darwin | 2013-07-12 09:32:23 +0100 |
| commit | fcd761b9d7c3c91673efce9b980ac5e7973adf3d (patch) | |
| tree | a115a48336f6cafabed86ede78c62eac7da057da /src/ngSanitize/sanitize.js | |
| parent | b0d5f062e316370c7ac57cfd628d085015a8187d (diff) | |
| download | angular.js-fcd761b9d7c3c91673efce9b980ac5e7973adf3d.tar.bz2 | |
fix(sanitize): match URI schemes case-insensitively
According to RFC 3986 (http://tools.ietf.org/html/rfc3986#section-3.1)
schemes such as http or mailto are case-insensitive. So links such as
http://server/ and HTTP://server/ are valid and equivalent.
Closes #3210
Diffstat (limited to 'src/ngSanitize/sanitize.js')
| -rw-r--r-- | src/ngSanitize/sanitize.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/ngSanitize/sanitize.js b/src/ngSanitize/sanitize.js index 94aeef22..bd694818 100644 --- a/src/ngSanitize/sanitize.js +++ b/src/ngSanitize/sanitize.js @@ -142,7 +142,7 @@ var START_TAG_REGEXP = /^<\s*([\w:-]+)((?:\s+[\w:-]+(?:\s*=\s*(?:(?:"[^"]*")|(?: BEGING_END_TAGE_REGEXP = /^<\s*\//, COMMENT_REGEXP = /<!--(.*?)-->/g, CDATA_REGEXP = /<!\[CDATA\[(.*?)]]>/g, - URI_REGEXP = /^((ftp|https?):\/\/|mailto:|#)/, + URI_REGEXP = /^((ftp|https?):\/\/|mailto:|#)/i, NON_ALPHANUMERIC_REGEXP = /([^\#-~| |!])/g; // Match everything outside of normal chars and " (quote character) |