From 637c9b1611c5a75a42048ee1c591521c7031751a Mon Sep 17 00:00:00 2001 From: justinrknowles Date: Sun, 18 Aug 2013 14:01:34 -0400 Subject: fix($sce): allow IE7 standards mode to pass non-quirks mode test Changes documentMode test version to 7 in order to support IE 8 in IE 7 standards mode while still protecting against quirks mode. documentMode returns the following values: 5 - quirks mode, 7 - IE 7 standards mode, 8 - IE 8 standards mode. Closes #3633 Closes #3646 --- src/ng/sce.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/ng/sce.js') diff --git a/src/ng/sce.js b/src/ng/sce.js index 60356097..68b97f61 100644 --- a/src/ng/sce.js +++ b/src/ng/sce.js @@ -620,7 +620,7 @@ function $SceProvider() { // the "expression(javascript expression)" syntax which is insecure. if (enabled && msie) { var documentMode = $document[0].documentMode; - if (documentMode !== undefined && documentMode < 8) { + if (documentMode !== undefined && documentMode < 7) { throw $sceMinErr('iequirks', 'Strict Contextual Escaping does not support Internet Explorer version < 9 in quirks ' + 'mode. You can fix this by adding the text to the top of your HTML ' + -- cgit v1.2.3