@@ -703,7 +703,7 @@ describe('parser', function() {
703
703
scope . fn = Function . prototype . call ;
704
704
705
705
expect ( function ( ) {
706
- scope . $eval ( '$eval.call()' )
706
+ scope . $eval ( '$eval.call()' ) ;
707
707
} ) . toThrowMinErr (
708
708
'$parse' , 'isecff' , 'Referencing call, apply or bind in Angular expressions is disallowed! ' +
709
709
'Expression: $eval.call()' ) ;
@@ -719,13 +719,13 @@ describe('parser', function() {
719
719
scope . apply = Function . prototype . apply ;
720
720
721
721
expect ( function ( ) {
722
- scope . $eval ( '$eval.apply()' )
722
+ scope . $eval ( '$eval.apply()' ) ;
723
723
} ) . toThrowMinErr (
724
724
'$parse' , 'isecff' , 'Referencing call, apply or bind in Angular expressions is disallowed! ' +
725
725
'Expression: $eval.apply()' ) ;
726
726
727
727
expect ( function ( ) {
728
- scope . $eval ( 'apply()' )
728
+ scope . $eval ( 'apply()' ) ;
729
729
} ) . toThrowMinErr (
730
730
'$parse' , 'isecff' , 'Referencing call, apply or bind in Angular expressions is disallowed! ' +
731
731
'Expression: apply()' ) ;
@@ -735,13 +735,13 @@ describe('parser', function() {
735
735
scope . bind = Function . prototype . bind ;
736
736
737
737
expect ( function ( ) {
738
- scope . $eval ( '$eval.bind()' )
738
+ scope . $eval ( '$eval.bind()' ) ;
739
739
} ) . toThrowMinErr (
740
740
'$parse' , 'isecff' , 'Referencing call, apply or bind in Angular expressions is disallowed! ' +
741
741
'Expression: $eval.bind()' ) ;
742
742
743
743
expect ( function ( ) {
744
- scope . $eval ( 'bind()' )
744
+ scope . $eval ( 'bind()' ) ;
745
745
} ) . toThrowMinErr (
746
746
'$parse' , 'isecff' , 'Referencing call, apply or bind in Angular expressions is disallowed! ' +
747
747
'Expression: bind()' ) ;
@@ -840,97 +840,127 @@ describe('parser', function() {
840
840
describe ( 'Disallowed fields' , function ( ) {
841
841
it ( 'should NOT allow access or invocation of __defineGetter__' , function ( ) {
842
842
expect ( function ( ) {
843
- scope . $eval ( '{}.__defineGetter__' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
843
+ scope . $eval ( '{}.__defineGetter__' ) ;
844
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
844
845
expect ( function ( ) {
845
- scope . $eval ( '{}.__defineGetter__("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
846
+ scope . $eval ( '{}.__defineGetter__("a", "".charAt)' ) ;
847
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
846
848
847
849
expect ( function ( ) {
848
- scope . $eval ( '{}["__defineGetter__"]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
850
+ scope . $eval ( '{}["__defineGetter__"]' ) ;
851
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
849
852
expect ( function ( ) {
850
- scope . $eval ( '{}["__defineGetter__"]("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
853
+ scope . $eval ( '{}["__defineGetter__"]("a", "".charAt)' ) ;
854
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
851
855
852
856
scope . a = "__define" ;
853
857
scope . b = "Getter__" ;
854
858
expect ( function ( ) {
855
- scope . $eval ( '{}[a + b]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
859
+ scope . $eval ( '{}[a + b]' ) ;
860
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
856
861
expect ( function ( ) {
857
- scope . $eval ( '{}[a + b]("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
862
+ scope . $eval ( '{}[a + b]("a", "".charAt)' ) ;
863
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
858
864
} ) ;
859
865
860
866
it ( 'should NOT allow access or invocation of __defineSetter__' , function ( ) {
861
867
expect ( function ( ) {
862
- scope . $eval ( '{}.__defineSetter__' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
868
+ scope . $eval ( '{}.__defineSetter__' ) ;
869
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
863
870
expect ( function ( ) {
864
- scope . $eval ( '{}.__defineSetter__("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
871
+ scope . $eval ( '{}.__defineSetter__("a", "".charAt)' ) ;
872
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
865
873
866
874
expect ( function ( ) {
867
- scope . $eval ( '{}["__defineSetter__"]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
875
+ scope . $eval ( '{}["__defineSetter__"]' ) ;
876
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
868
877
expect ( function ( ) {
869
- scope . $eval ( '{}["__defineSetter__"]("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
878
+ scope . $eval ( '{}["__defineSetter__"]("a", "".charAt)' ) ;
879
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
870
880
871
881
scope . a = "__define" ;
872
882
scope . b = "Setter__" ;
873
883
expect ( function ( ) {
874
- scope . $eval ( '{}[a + b]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
884
+ scope . $eval ( '{}[a + b]' ) ;
885
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
875
886
expect ( function ( ) {
876
- scope . $eval ( '{}[a + b]("a", "".charAt)' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
887
+ scope . $eval ( '{}[a + b]("a", "".charAt)' ) ;
888
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
877
889
} ) ;
878
890
879
891
it ( 'should NOT allow access or invocation of __lookupGetter__' , function ( ) {
880
892
expect ( function ( ) {
881
- scope . $eval ( '{}.__lookupGetter__' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
893
+ scope . $eval ( '{}.__lookupGetter__' ) ;
894
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
882
895
expect ( function ( ) {
883
- scope . $eval ( '{}.__lookupGetter__("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
896
+ scope . $eval ( '{}.__lookupGetter__("a")' ) ;
897
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
884
898
885
899
expect ( function ( ) {
886
- scope . $eval ( '{}["__lookupGetter__"]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
900
+ scope . $eval ( '{}["__lookupGetter__"]' ) ;
901
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
887
902
expect ( function ( ) {
888
- scope . $eval ( '{}["__lookupGetter__"]("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
903
+ scope . $eval ( '{}["__lookupGetter__"]("a")' ) ;
904
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
889
905
890
906
scope . a = "__lookup" ;
891
907
scope . b = "Getter__" ;
892
908
expect ( function ( ) {
893
- scope . $eval ( '{}[a + b]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
909
+ scope . $eval ( '{}[a + b]' ) ;
910
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
894
911
expect ( function ( ) {
895
- scope . $eval ( '{}[a + b]("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
912
+ scope . $eval ( '{}[a + b]("a")' ) ;
913
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
896
914
} ) ;
897
915
898
916
it ( 'should NOT allow access or invocation of __lookupSetter__' , function ( ) {
899
917
expect ( function ( ) {
900
- scope . $eval ( '{}.__lookupSetter__' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
918
+ scope . $eval ( '{}.__lookupSetter__' ) ;
919
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
901
920
expect ( function ( ) {
902
- scope . $eval ( '{}.__lookupSetter__("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
921
+ scope . $eval ( '{}.__lookupSetter__("a")' ) ;
922
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
903
923
904
924
expect ( function ( ) {
905
- scope . $eval ( '{}["__lookupSetter__"]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
925
+ scope . $eval ( '{}["__lookupSetter__"]' ) ;
926
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
906
927
expect ( function ( ) {
907
- scope . $eval ( '{}["__lookupSetter__"]("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
928
+ scope . $eval ( '{}["__lookupSetter__"]("a")' ) ;
929
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
908
930
909
931
scope . a = "__lookup" ;
910
932
scope . b = "Setter__" ;
911
933
expect ( function ( ) {
912
- scope . $eval ( '{}[a + b]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
934
+ scope . $eval ( '{}[a + b]' ) ;
935
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
913
936
expect ( function ( ) {
914
- scope . $eval ( '{}[a + b]("a")' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
937
+ scope . $eval ( '{}[a + b]("a")' ) ;
938
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
915
939
} ) ;
916
940
917
941
it ( 'should NOT allow access to __proto__' , function ( ) {
918
942
expect ( function ( ) {
919
- scope . $eval ( '{}.__proto__' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
943
+ scope . $eval ( '{}.__proto__' ) ;
944
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
920
945
expect ( function ( ) {
921
- scope . $eval ( '{}.__proto__.foo = 1' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
946
+ scope . $eval ( '{}.__proto__.foo = 1' ) ;
947
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
922
948
923
949
expect ( function ( ) {
924
- scope . $eval ( '{}["__proto__"]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
950
+ scope . $eval ( '{}["__proto__"]' ) ;
951
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
925
952
expect ( function ( ) {
926
- scope . $eval ( '{}["__proto__"].foo = 1' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
953
+ scope . $eval ( '{}["__proto__"].foo = 1' ) ;
954
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
927
955
928
956
scope . a = "__pro" ;
929
957
scope . b = "to__" ;
930
958
expect ( function ( ) {
931
- scope . $eval ( '{}[a + b]' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
959
+ scope . $eval ( '{}[a + b]' ) ;
960
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
932
961
expect ( function ( ) {
933
- scope . $eval ( '{}[a + b].foo = 1' ) ; } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
962
+ scope . $eval ( '{}[a + b].foo = 1' ) ;
963
+ } ) . toThrowMinErr ( '$parse' , 'isecfld' ) ;
934
964
} ) ;
935
965
} ) ;
936
966
0 commit comments