aboutsummaryrefslogtreecommitdiffstats
path: root/docs/content/error
AgeCommit message (Collapse)Author
2013-10-30feat($parse): secure expressions by hiding "private" propertiesChirayu Krishnappa
BREAKING CHANGE: This commit introduces the notion of "private" properties (properties whose names begin and/or end with an underscore) on the scope chain. These properties will not be available to Angular expressions (i.e. {{ }} interpolation in templates and strings passed to `$parse`) They are freely available to JavaScript code (as before). Motivation ---------- Angular expressions execute in a limited context.  They do not have direct access to the global scope, Window, Document or the Function constructor.  However, they have direct access to names/properties on the scope chain.  It has been a long standing best practice to keep sensitive APIs outside of the scope chain (in a closure or your controller.)  That's easier said that done for two reasons: (1) JavaScript does not have a notion of private properties so if you need someone on the scope chain for JavaScript use, you also expose it to Angular expressions, and (2) the new "controller as" syntax that's now in increased usage exposes the entire controller on the scope chain greatly increaing the exposed surface.  Though Angular expressions are written and controlled by the developer, they (1) typically deal with user input and (2) don't get the kind of test coverage that JavaScript code would.  This commit provides a way, via a naming convention, to allow publishing/restricting properties from controllers/scopes to Angular expressions enabling one to only expose those properties that are actually needed by the expressions.
2013-10-26docs(error/compile/tplrt): split long linesPete Bacon Darwin
2013-10-26docs(error/compile/tplrt): clarify and grammargdennie
Closes #4503
2013-10-26Clarification stemming from my own issuesgdennie
It is instructive to give literal examples that reflect common (my) experience of the problem. :)
2013-10-24docs(error/multidir): improve the sentence fluencyCloudDueling.com
Closes #4449
2013-10-24docs(modulerr): fix typoG.H. Naylor
Closes #4418
2013-10-23docs(guide/directive,guide/compiler,): drastically improveBrian Ford
2013-10-18docs: correct broken linksVojta Jina
This also contains some whitespace corrections by my editor.
2013-10-15docs($rootScope): better document infinite digest and ttlIgor Minar
2013-10-07fix(*): protect calls to hasOwnProperty in public APIPeter Bacon Darwin
Objects received from outside AngularJS may have had their `hasOwnProperty` method overridden with something else. In cases where we can do this without incurring a performance penalty we call directly on Object.prototype.hasOwnProperty to ensure that we use the correct method. Also, we have some internal hash objects, where the keys for the map are provided from outside AngularJS. In such cases we either prevent `hasOwnProperty` from being used as a key or provide some other way of preventing our objects from having their `hasOwnProperty` overridden. BREAKING CHANGE: Inputs with name equal to "hasOwnProperty" are not allowed inside form or ngForm directives. Before, inputs whose name was "hasOwnProperty" were quietly ignored and not added to the scope. Now a badname exception is thrown. Using "hasOwnProperty" for an input name would be very unusual and bad practice. Either do not include such an input in a `form` or `ngForm` directive or change the name of the input. Closes #3331
2013-10-01feat($sce): simpler patterns for $sceDelegateProviders white/blacklistsChirayu Krishnappa
Closes #4006
2013-09-30fix(ngTransclude): detect ngTranslude usage without a transclusion directivejankuca
Closes #3759
2013-09-30docs(minerr): add note about ngRoute in injector/modulerrBrian Ford
2013-09-26docs(minerr): fix broken style from long line in nonassignBrian Ford
2013-09-17fix($parse): disallow access to window and dom in expressionsChirayu Krishnappa
2013-08-15chore(minerr): move $sce:insecurl file to sce directoryKen Sheedlo
Closes #3568
2013-08-12docs(minErr): add location/ipthprfxIgor Minar
2013-08-12docs(minErr): add location/isrcharg docsIgor Minar
2013-08-12docs(minErr): add location/ihshprfxIgor Minar
2013-08-12chore($location): drop bugus errorIgor Minar
we can never get to this state, so dropping the error
2013-08-09style(minerr): prefer component name as namespaceKen Sheedlo
Closes #3527
2013-08-09fix(re-bootstrap): Throw an error when bootstrapping a bootstrapped element.Jeff Cross
Nothing would prevent a user from accidentally calling angular.bootstrap on an element that had already been bootstrapped. If this was done, odd behavior could manifest in an application, causing different scopes to update the same DOM, and causing debugger confusion. This fix adds a check inside of angular.bootstrap to check if the passed-in element already has an injector, and if so, will throw an error.
2013-08-09docs(jqLite): update the minErr codes for on() and off()Igor Minar
2013-08-08docs(compile/tplrt): description for compile/tplrt errorMisko Hevery
Closes #3459
2013-08-08docs(compile/selmulti): description for compile/selmulti errorMisko Hevery
Closes #3459
2013-08-08docs(compile/nodomevents): description for compile/nodomevents errorMisko Hevery
Closes #3459
2013-08-08docs(compile/notassign): description for compile/notassign errorMisko Hevery
Closes #3459
2013-08-08docs(compile/multidir): description for compile/multidir errorMisko Hevery
Closes #3459
2013-08-08docs(minErr): add controller/noscp docsIgor Minar
2013-08-08docs(minErr): add rootScope/inprog docsIgor Minar
2013-08-08docs(minErr): improve compiler/iscpIgor Minar
2013-08-08docs(minErr): improve sce/icontextIgor Minar
2013-08-08docs(minErr): improve sce/iequirks docIgor Minar
2013-08-08docs(minerr): add description for ngResource:badargsKen Sheedlo
Closes #3510
2013-08-08docs(minErr): add minErr description for jqLite:noselBrian Ford
Closes #3426
2013-08-08docs(minerr): add description for ngResource:badcfgKen Sheedlo
Closes #3509
2013-08-08docs(minErr): rename compile/utrat to compile/uterdirIgor Minar
2013-08-08docs(minerr): add description for $compile:utratKen Sheedlo
Closes #3507
2013-08-08docs(minErr): improve sce/isecurl docIgor Minar
2013-08-08docs(minErr): rename sce/isecrurl to sce/insecurlIgor Minar
2013-08-08docs(minErr): improve sce/itype.ngdocIgor Minar
2013-08-08docs(minErr): add minErr description for $compile:ctreqBrian Ford
Closes #3423
2013-08-07docs(minerr): fill in error message descriptionsKen Sheedlo
Errors I've documented so far: - `$injector:cdep` - `$injector:itkn` - `$injector:modulerr` - `$injector:nomod` - `$injector:pget` - `$injector:unpr` - `ng:areq` - `ng:cpi` - `ng:cpws` - `ngModel:noass` Closes #3430
2013-08-07docs(minerr): add description for $rootScope:infdigKen Sheedlo
2013-08-07docs(minErr): add minErr description for $compile:tploadBrian Ford
Closes #3427
2013-08-07docs(error): updated description for ngPattern/noregexp.ngdocnaomiblack
2013-08-07docs(error): added description for ngOptions/iexp.ngdocnaomiblack
Closes #3431
2013-08-07docs(error): added description for ngSanitize/badparse.ngdocnaomiblack
Closes #3438
2013-08-07docs(minErr): improve $parse/isecfnIgor Minar
2013-08-07docs(minerr): Adds a description for parser.lexerrJames deBoer
Closes #3433
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-26 23:08:14 +0000