TemplateSecurityContext enum
A TemplateSecurityContext specifies a category of security vulnerabilities if the content is not sanitized.
Examples: A DOM property that is used as a url is classified as having
the Url HtmlSecurityContext
.
innerHTML
that could cause Cross Site Scripting (XSS) security bugs when
improperly handled is classified as HTML.
Values
- none → const TemplateSecurityContext
-
No security implication.
- html → const TemplateSecurityContext
-
Context for free form html content.
- style → const TemplateSecurityContext
-
Context for element style.
- url → const TemplateSecurityContext
-
Link such as a,href.
- resourceUrl → const TemplateSecurityContext
-
Url pointing to a resource to be loaded.
Properties
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited
Constants
-
values
→ const List<
TemplateSecurityContext> - A constant List of the values in this enum, in order of their declaration.