Skip to content

Commit 446fac8

Browse files
committed
docs(CHANGELOG.md): document 234053f as a BC
Closes angular#13927
1 parent 43f7206 commit 446fac8

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

CHANGELOG.md

+8-1
Original file line numberDiff line numberDiff line change
@@ -72,8 +72,15 @@ changes section for more information
7272

7373
## Breaking Changes
7474

75-
- **ngTouch:** due to [0dfc1dfe](https://github.com/angular/angular.js/commit/0dfc1dfebf26af7f951f301c4e3848ac46f05d7f),
75+
- **ngSanitize:** due to [234053fc](https://github.com/angular/angular.js/commit/234053fc9ad90e0d05be7e8359c6af66be94c094),
76+
77+
The `$sanitize` service will now remove instances of the `usemap` attribute from any elements passed to it.
7678

79+
This attribute is used to reference another element by `name` or `id`. Since the `name` and `id`
80+
attributes are already blacklisted, a sanitized `usemap` attribute could only reference unsanitized
81+
content, which is a security risk.
82+
83+
- **ngTouch:** due to [0dfc1dfe](https://github.com/angular/angular.js/commit/0dfc1dfebf26af7f951f301c4e3848ac46f05d7f),
7784

7885
The `ngClick` override directive from the `ngTouch` module is **deprecated and disabled by default**.
7986
This means that on touch-based devices, users might now experience a 300ms delay before a click event is fired.

0 commit comments

Comments
 (0)