From 3b2c6f09cb857b86641cefde5b92d84d58c1118d Mon Sep 17 00:00:00 2001 From: Anders Hessellund Jensen Date: Mon, 6 May 2013 22:18:42 +0200 Subject: fix($compile): empty normalized href should pass sanitation check Sometimes IE returns an empty string for its normalized href on a tags. This should pass the sanitation check in $compile. Closes #2219, #2593 --- src/ng/compile.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/ng/compile.js') diff --git a/src/ng/compile.js b/src/ng/compile.js index a609d615..cfdaddf9 100644 --- a/src/ng/compile.js +++ b/src/ng/compile.js @@ -293,7 +293,7 @@ function $CompileProvider($provide) { // href property always returns normalized absolute url, so we can match against that normalizedVal = urlSanitizationNode.href; - if (!normalizedVal.match(urlSanitizationWhitelist)) { + if (normalizedVal !== '' && !normalizedVal.match(urlSanitizationWhitelist)) { this[key] = value = 'unsafe:' + normalizedVal; } } -- cgit v1.2.3