winjs / angular-winjs

Project to smooth the AngularJS/WinJS interaction
Other
126 stars 46 forks source link

Missing URI schemes in the angular img/aHref sanitization whitelist #20

Closed TheWrathOfConst closed 9 years ago

TheWrathOfConst commented 9 years ago

We're missing case "ms-appdata":, and missing a whitelist for URI strings