File tree 1 file changed +8
-1
lines changed
1 file changed +8
-1
lines changed Original file line number Diff line number Diff line change @@ -72,8 +72,15 @@ changes section for more information
72
72
73
73
## Breaking Changes
74
74
75
- - **ngTouch:** due to [0dfc1dfe](https://github.com/angular/angular.js/commit/0dfc1dfebf26af7f951f301c4e3848ac46f05d7f),
75
+ - **ngSanitize:** due to [234053fc](https://github.com/angular/angular.js/commit/234053fc9ad90e0d05be7e8359c6af66be94c094),
76
+
77
+ The `$sanitize` service will now remove instances of the `usemap` attribute from any elements passed to it.
76
78
79
+ This attribute is used to reference another element by `name` or `id`. Since the `name` and `id`
80
+ attributes are already blacklisted, a sanitized `usemap` attribute could only reference unsanitized
81
+ content, which is a security risk.
82
+
83
+ - **ngTouch:** due to [0dfc1dfe](https://github.com/angular/angular.js/commit/0dfc1dfebf26af7f951f301c4e3848ac46f05d7f),
77
84
78
85
The `ngClick` override directive from the `ngTouch` module is **deprecated and disabled by default**.
79
86
This means that on touch-based devices, users might now experience a 300ms delay before a click event is fired.
You can’t perform that action at this time.
0 commit comments