perso/syncthing-arm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

gui: Update Angular to 1.3.20, enable $applyAsync (fixes #4918)

Browse Source
This commit is contained in:
Jakob Borg
2018-05-05 12:13:16 +02:00
committed by Audrius Butkevicius
parent a94aceb22f
commit 3b5e1fa0fc
4 changed files with 12785 additions and 6880 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
gui/default/syncthing/app.js
View File

@@ -21,6 +21,7 @@ syncthing.config(function ($httpProvider, $translateProvider, LocaleServiceProvi
var deviceIDShort = metadata.deviceID.substr(0, 5); var deviceIDShort = metadata.deviceID.substr(0, 5);
$httpProvider.defaults.xsrfHeaderName = 'X-CSRF-Token-' + deviceIDShort; $httpProvider.defaults.xsrfHeaderName = 'X-CSRF-Token-' + deviceIDShort;
$httpProvider.defaults.xsrfCookieName = 'CSRF-Token-' + deviceIDShort; $httpProvider.defaults.xsrfCookieName = 'CSRF-Token-' + deviceIDShort;
$httpProvider.useApplyAsync(true);
// language and localisation // language and localisation

2
gui/default/vendor/angular/README.md vendored
View File

@@ -1,6 +1,6 @@
The files contained herein are: The files contained herein are:
- angular 1.2.9 - angular 1.3.20
- angular-translate 2.9.0.1 - angular-translate 2.9.0.1
- angular-translate-loader-static-files 2.11.0 - angular-translate-loader-static-files 2.11.0
- angular-dirPagination 759009c - angular-dirPagination 759009c

224
gui/default/vendor/angular/angular-sanitize.js vendored
View File

@@ -1,10 +1,21 @@
/** /**
* @license AngularJS v1.2.27 * @license AngularJS v1.3.20
* (c) 2010-2014 Google, Inc. http://angularjs.org * (c) 2010-2014 Google, Inc. http://angularjs.org
* License: MIT * License: MIT
*/ */
(function(window, angular, undefined) {'use strict'; (function(window, angular, undefined) {'use strict';
/* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* Any commits to this file should be reviewed with security in mind. *
* Changes to this file can potentially create security vulnerabilities. *
* An approval from 2 Core members with history of modifying *
* this file is required. *
* *
* Does the change somehow allow for arbitrary javascript to be executed? *
* Or allows for someone to change the prototype of built-in objects? *
* Or gives undesired access to variables likes document or window? *
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
var $sanitizeMinErr = angular.$$minErr('$sanitize'); var $sanitizeMinErr = angular.$$minErr('$sanitize');
/** /**
@@ -45,16 +56,16 @@ var $sanitizeMinErr = angular.$$minErr('$sanitize');
* @kind function * @kind function
* *
* @description * @description
* The input is sanitized by parsing the html into tokens. All safe tokens (from a whitelist) are * The input is sanitized by parsing the HTML into tokens. All safe tokens (from a whitelist) are
* then serialized back to properly escaped html string. This means that no unsafe input can make * then serialized back to properly escaped html string. This means that no unsafe input can make
* it into the returned string, however, since our parser is more strict than a typical browser * it into the returned string, however, since our parser is more strict than a typical browser
* parser, it's possible that some obscure input, which would be recognized as valid HTML by a * parser, it's possible that some obscure input, which would be recognized as valid HTML by a
* browser, won't make it through the sanitizer. * browser, won't make it through the sanitizer. The input may also contain SVG markup.
* The whitelist is configured using the functions `aHrefSanitizationWhitelist` and * The whitelist is configured using the functions `aHrefSanitizationWhitelist` and
* `imgSrcSanitizationWhitelist` of {@link ng.$compileProvider `$compileProvider`}. * `imgSrcSanitizationWhitelist` of {@link ng.$compileProvider `$compileProvider`}.
* *
* @param {string} html Html input. * @param {string} html HTML input.
* @returns {string} Sanitized html. * @returns {string} Sanitized HTML.
* *
* @example * @example
<example module="sanitizeExample" deps="angular-sanitize.js"> <example module="sanitizeExample" deps="angular-sanitize.js">
@@ -198,6 +209,12 @@ var inlineElements = angular.extend({}, optionalEndTagInlineElements, makeMap("a
"bdi,bdo,big,br,cite,code,del,dfn,em,font,i,img,ins,kbd,label,map,mark,q,ruby,rp,rt,s," + "bdi,bdo,big,br,cite,code,del,dfn,em,font,i,img,ins,kbd,label,map,mark,q,ruby,rp,rt,s," +
"samp,small,span,strike,strong,sub,sup,time,tt,u,var")); "samp,small,span,strike,strong,sub,sup,time,tt,u,var"));
// SVG Elements
// https://wiki.whatwg.org/wiki/Sanitization_rules#svg_Elements
var svgElements = makeMap("animate,animateColor,animateMotion,animateTransform,circle,defs," +
"desc,ellipse,font-face,font-face-name,font-face-src,g,glyph,hkern,image,linearGradient," +
"line,marker,metadata,missing-glyph,mpath,path,polygon,polyline,radialGradient,rect,set," +
"stop,svg,switch,text,title,tspan,use");
// Special Elements (can contain anything) // Special Elements (can contain anything)
var specialElements = makeMap("script,style"); var specialElements = makeMap("script,style");
@@ -206,16 +223,41 @@ var validElements = angular.extend({},
voidElements, voidElements,
blockElements, blockElements,
inlineElements, inlineElements,
optionalEndTagElements); optionalEndTagElements,
svgElements);
//Attributes that have href and hence need to be sanitized //Attributes that have href and hence need to be sanitized
var uriAttrs = makeMap("background,cite,href,longdesc,src,usemap"); var uriAttrs = makeMap("background,cite,href,longdesc,src,usemap,xlink:href");
var validAttrs = angular.extend({}, uriAttrs, makeMap(
'abbr,align,alt,axis,bgcolor,border,cellpadding,cellspacing,class,clear,'+ var htmlAttrs = makeMap('abbr,align,alt,axis,bgcolor,border,cellpadding,cellspacing,class,clear,' +
'color,cols,colspan,compact,coords,dir,face,headers,height,hreflang,hspace,'+ 'color,cols,colspan,compact,coords,dir,face,headers,height,hreflang,hspace,' +
'ismap,lang,language,nohref,nowrap,rel,rev,rows,rowspan,rules,'+ 'ismap,lang,language,nohref,nowrap,rel,rev,rows,rowspan,rules,' +
'scope,scrolling,shape,size,span,start,summary,target,title,type,'+ 'scope,scrolling,shape,size,span,start,summary,target,title,type,' +
'valign,value,vspace,width')); 'valign,value,vspace,width');
// SVG attributes (without "id" and "name" attributes)
// https://wiki.whatwg.org/wiki/Sanitization_rules#svg_Attributes
var svgAttrs = makeMap('accent-height,accumulate,additive,alphabetic,arabic-form,ascent,' +
'attributeName,attributeType,baseProfile,bbox,begin,by,calcMode,cap-height,class,color,' +
'color-rendering,content,cx,cy,d,dx,dy,descent,display,dur,end,fill,fill-rule,font-family,' +
'font-size,font-stretch,font-style,font-variant,font-weight,from,fx,fy,g1,g2,glyph-name,' +
'gradientUnits,hanging,height,horiz-adv-x,horiz-origin-x,ideographic,k,keyPoints,' +
'keySplines,keyTimes,lang,marker-end,marker-mid,marker-start,markerHeight,markerUnits,' +
'markerWidth,mathematical,max,min,offset,opacity,orient,origin,overline-position,' +
'overline-thickness,panose-1,path,pathLength,points,preserveAspectRatio,r,refX,refY,' +
'repeatCount,repeatDur,requiredExtensions,requiredFeatures,restart,rotate,rx,ry,slope,stemh,' +
'stemv,stop-color,stop-opacity,strikethrough-position,strikethrough-thickness,stroke,' +
'stroke-dasharray,stroke-dashoffset,stroke-linecap,stroke-linejoin,stroke-miterlimit,' +
'stroke-opacity,stroke-width,systemLanguage,target,text-anchor,to,transform,type,u1,u2,' +
'underline-position,underline-thickness,unicode,unicode-range,units-per-em,values,version,' +
'viewBox,visibility,width,widths,x,x-height,x1,x2,xlink:actuate,xlink:arcrole,xlink:role,' +
'xlink:show,xlink:title,xlink:type,xml:base,xml:lang,xml:space,xmlns,xmlns:xlink,y,y1,y2,' +
'zoomAndPan');
var validAttrs = angular.extend({},
uriAttrs,
svgAttrs,
htmlAttrs);
function makeMap(str) { function makeMap(str) {
var obj = {}, items = str.split(','), i; var obj = {}, items = str.split(','), i;
@@ -236,7 +278,7 @@ function makeMap(str) {
* @param {string} html string * @param {string} html string
* @param {object} handler * @param {object} handler
*/ */
function htmlParser( html, handler ) { function htmlParser(html, handler) {
if (typeof html !== 'string') { if (typeof html !== 'string') {
if (html === null || typeof html === 'undefined') { if (html === null || typeof html === 'undefined') {
html = ''; html = '';
@@ -245,52 +287,52 @@ function htmlParser( html, handler ) {
} }
} }
var index, chars, match, stack = [], last = html, text; var index, chars, match, stack = [], last = html, text;
stack.last = function() { return stack[ stack.length - 1 ]; }; stack.last = function() { return stack[stack.length - 1]; };
while ( html ) { while (html) {
text = ''; text = '';
chars = true; chars = true;
// Make sure we're not in a script or style element // Make sure we're not in a script or style element
if ( !stack.last() || !specialElements[ stack.last() ] ) { if (!stack.last() || !specialElements[stack.last()]) {
// Comment // Comment
if ( html.indexOf("<!--") === 0 ) { if (html.indexOf("<!--") === 0) {
// comments containing -- are not allowed unless they terminate the comment // comments containing -- are not allowed unless they terminate the comment
index = html.indexOf("--", 4); index = html.indexOf("--", 4);
if ( index >= 0 && html.lastIndexOf("-->", index) === index) { if (index >= 0 && html.lastIndexOf("-->", index) === index) {
if (handler.comment) handler.comment( html.substring( 4, index ) ); if (handler.comment) handler.comment(html.substring(4, index));
html = html.substring( index + 3 ); html = html.substring(index + 3);
chars = false; chars = false;
} }
// DOCTYPE // DOCTYPE
} else if ( DOCTYPE_REGEXP.test(html) ) { } else if (DOCTYPE_REGEXP.test(html)) {
match = html.match( DOCTYPE_REGEXP ); match = html.match(DOCTYPE_REGEXP);
if ( match ) { if (match) {
html = html.replace( match[0], ''); html = html.replace(match[0], '');
chars = false; chars = false;
} }
// end tag // end tag
} else if ( BEGING_END_TAGE_REGEXP.test(html) ) { } else if (BEGING_END_TAGE_REGEXP.test(html)) {
match = html.match( END_TAG_REGEXP ); match = html.match(END_TAG_REGEXP);
if ( match ) { if (match) {
html = html.substring( match[0].length ); html = html.substring(match[0].length);
match[0].replace( END_TAG_REGEXP, parseEndTag ); match[0].replace(END_TAG_REGEXP, parseEndTag);
chars = false; chars = false;
} }
// start tag // start tag
} else if ( BEGIN_TAG_REGEXP.test(html) ) { } else if (BEGIN_TAG_REGEXP.test(html)) {
match = html.match( START_TAG_REGEXP ); match = html.match(START_TAG_REGEXP);
if ( match ) { if (match) {
// We only have a valid start-tag if there is a '>'. // We only have a valid start-tag if there is a '>'.
if ( match[4] ) { if (match[4]) {
html = html.substring( match[0].length ); html = html.substring(match[0].length);
match[0].replace( START_TAG_REGEXP, parseStartTag ); match[0].replace(START_TAG_REGEXP, parseStartTag);
} }
chars = false; chars = false;
} else { } else {
@@ -300,29 +342,30 @@ function htmlParser( html, handler ) {
} }
} }
if ( chars ) { if (chars) {
index = html.indexOf("<"); index = html.indexOf("<");
text += index < 0 ? html : html.substring( 0, index ); text += index < 0 ? html : html.substring(0, index);
html = index < 0 ? "" : html.substring( index ); html = index < 0 ? "" : html.substring(index);
if (handler.chars) handler.chars( decodeEntities(text) ); if (handler.chars) handler.chars(decodeEntities(text));
} }
} else { } else {
html = html.replace(new RegExp("(.*)<\\s*\\/\\s*" + stack.last() + "[^>]*>", 'i'), // IE versions 9 and 10 do not understand the regex '[^]', so using a workaround with [\W\w].
function(all, text){ html = html.replace(new RegExp("([\\W\\w]*)<\\s*\\/\\s*" + stack.last() + "[^>]*>", 'i'),
function(all, text) {
text = text.replace(COMMENT_REGEXP, "$1").replace(CDATA_REGEXP, "$1"); text = text.replace(COMMENT_REGEXP, "$1").replace(CDATA_REGEXP, "$1");
if (handler.chars) handler.chars( decodeEntities(text) ); if (handler.chars) handler.chars(decodeEntities(text));
return ""; return "";
}); });
parseEndTag( "", stack.last() ); parseEndTag("", stack.last());
} }
if ( html == last ) { if (html == last) {
throw $sanitizeMinErr('badparse', "The sanitizer was unable to parse the following block " + throw $sanitizeMinErr('badparse', "The sanitizer was unable to parse the following block " +
"of html: {0}", html); "of html: {0}", html);
} }
@@ -332,22 +375,22 @@ function htmlParser( html, handler ) {
// Clean up any remaining tags // Clean up any remaining tags
parseEndTag(); parseEndTag();
function parseStartTag( tag, tagName, rest, unary ) { function parseStartTag(tag, tagName, rest, unary) {
tagName = angular.lowercase(tagName); tagName = angular.lowercase(tagName);
if ( blockElements[ tagName ] ) { if (blockElements[tagName]) {
while ( stack.last() && inlineElements[ stack.last() ] ) { while (stack.last() && inlineElements[stack.last()]) {
parseEndTag( "", stack.last() ); parseEndTag("", stack.last());
} }
} }
if ( optionalEndTagElements[ tagName ] && stack.last() == tagName ) { if (optionalEndTagElements[tagName] && stack.last() == tagName) {
parseEndTag( "", tagName ); parseEndTag("", tagName);
} }
unary = voidElements[ tagName ] || !!unary; unary = voidElements[tagName] || !!unary;
if ( !unary ) if (!unary)
stack.push( tagName ); stack.push(tagName);
var attrs = {}; var attrs = {};
@@ -360,22 +403,22 @@ function htmlParser( html, handler ) {
attrs[name] = decodeEntities(value); attrs[name] = decodeEntities(value);
}); });
if (handler.start) handler.start( tagName, attrs, unary ); if (handler.start) handler.start(tagName, attrs, unary);
} }
function parseEndTag( tag, tagName ) { function parseEndTag(tag, tagName) {
var pos = 0, i; var pos = 0, i;
tagName = angular.lowercase(tagName); tagName = angular.lowercase(tagName);
if ( tagName ) if (tagName)
// Find the closest opened tag of the same type // Find the closest opened tag of the same type
for ( pos = stack.length - 1; pos >= 0; pos-- ) for (pos = stack.length - 1; pos >= 0; pos--)
if ( stack[ pos ] == tagName ) if (stack[pos] == tagName)
break; break;
if ( pos >= 0 ) { if (pos >= 0) {
// Close all the open elements, up the stack // Close all the open elements, up the stack
for ( i = stack.length - 1; i >= pos; i-- ) for (i = stack.length - 1; i >= pos; i--)
if (handler.end) handler.end( stack[ i ] ); if (handler.end) handler.end(stack[i]);
// Remove the open elements from the stack // Remove the open elements from the stack
stack.length = pos; stack.length = pos;
@@ -384,7 +427,6 @@ function htmlParser( html, handler ) {
} }
var hiddenPre=document.createElement("pre"); var hiddenPre=document.createElement("pre");
var spaceRe = /^(\s*)([\s\S]*?)(\s*)$/;
/** /**
* decodes all entities into regular string * decodes all entities into regular string
* @param value * @param value
@@ -393,22 +435,10 @@ var spaceRe = /^(\s*)([\s\S]*?)(\s*)$/;
function decodeEntities(value) { function decodeEntities(value) {
if (!value) { return ''; } if (!value) { return ''; }
// Note: IE8 does not preserve spaces at the start/end of innerHTML hiddenPre.innerHTML = value.replace(/</g,"&lt;");
// so we must capture them and reattach them afterward // innerText depends on styling as it doesn't display hidden elements.
var parts = spaceRe.exec(value); // Therefore, it's better to use textContent not to cause unnecessary reflows.
var spaceBefore = parts[1]; return hiddenPre.textContent;
var spaceAfter = parts[3];
var content = parts[2];
if (content) {
hiddenPre.innerHTML=content.replace(/</g,"&lt;");
// innerText depends on styling as it doesn't display hidden elements.
// Therefore, it's better to use textContent not to cause unnecessary
// reflows. However, IE<9 don't support textContent so the innerText
// fallback is necessary.
content = 'textContent' in hiddenPre ?
hiddenPre.textContent : hiddenPre.innerText;
}
return spaceBefore + content + spaceAfter;
} }
/** /**
@@ -421,12 +451,12 @@ function decodeEntities(value) {
function encodeEntities(value) { function encodeEntities(value) {
return value. return value.
replace(/&/g, '&amp;'). replace(/&/g, '&amp;').
replace(SURROGATE_PAIR_REGEXP, function (value) { replace(SURROGATE_PAIR_REGEXP, function(value) {
var hi = value.charCodeAt(0); var hi = value.charCodeAt(0);
var low = value.charCodeAt(1); var low = value.charCodeAt(1);
return '&#' + (((hi - 0xD800) * 0x400) + (low - 0xDC00) + 0x10000) + ';'; return '&#' + (((hi - 0xD800) * 0x400) + (low - 0xDC00) + 0x10000) + ';';
}). }).
replace(NON_ALPHANUMERIC_REGEXP, function(value){ replace(NON_ALPHANUMERIC_REGEXP, function(value) {
return '&#' + value.charCodeAt(0) + ';'; return '&#' + value.charCodeAt(0) + ';';
}). }).
replace(/</g, '&lt;'). replace(/</g, '&lt;').
@@ -443,11 +473,11 @@ function encodeEntities(value) {
* comment: function(text) {} * comment: function(text) {}
* } * }
*/ */
function htmlSanitizeWriter(buf, uriValidator){ function htmlSanitizeWriter(buf, uriValidator) {
var ignore = false; var ignore = false;
var out = angular.bind(buf, buf.push); var out = angular.bind(buf, buf.push);
return { return {
start: function(tag, attrs, unary){ start: function(tag, attrs, unary) {
tag = angular.lowercase(tag); tag = angular.lowercase(tag);
if (!ignore && specialElements[tag]) { if (!ignore && specialElements[tag]) {
ignore = tag; ignore = tag;
@@ -455,7 +485,7 @@ function htmlSanitizeWriter(buf, uriValidator){
if (!ignore && validElements[tag] === true) { if (!ignore && validElements[tag] === true) {
out('<'); out('<');
out(tag); out(tag);
angular.forEach(attrs, function(value, key){ angular.forEach(attrs, function(value, key) {
var lkey=angular.lowercase(key); var lkey=angular.lowercase(key);
var isImage = (tag === 'img' && lkey === 'src') || (lkey === 'background'); var isImage = (tag === 'img' && lkey === 'src') || (lkey === 'background');
if (validAttrs[lkey] === true && if (validAttrs[lkey] === true &&
@@ -470,7 +500,7 @@ function htmlSanitizeWriter(buf, uriValidator){
out(unary ? '/>' : '>'); out(unary ? '/>' : '>');
} }
}, },
end: function(tag){ end: function(tag) {
tag = angular.lowercase(tag); tag = angular.lowercase(tag);
if (!ignore && validElements[tag] === true) { if (!ignore && validElements[tag] === true) {
out('</'); out('</');
@@ -481,7 +511,7 @@ function htmlSanitizeWriter(buf, uriValidator){
ignore = false; ignore = false;
} }
}, },
chars: function(chars){ chars: function(chars) {
if (!ignore) { if (!ignore) {
out(encodeEntities(chars)); out(encodeEntities(chars));
} }
@@ -597,8 +627,8 @@ angular.module('ngSanitize', []).provider('$sanitize', $SanitizeProvider);
*/ */
angular.module('ngSanitize').filter('linky', ['$sanitize', function($sanitize) { angular.module('ngSanitize').filter('linky', ['$sanitize', function($sanitize) {
var LINKY_URL_REGEXP = var LINKY_URL_REGEXP =
/((ftp|https?):\/\/|(mailto:)?[A-Za-z0-9._%+-]+@)\S*[^\s.;,(){}<>"]/, /((ftp|https?):\/\/|(www\.)|(mailto:)?[A-Za-z0-9._%+-]+@)\S*[^\s.;,(){}<>"”’]/i,
MAILTO_REGEXP = /^mailto:/; MAILTO_REGEXP = /^mailto:/i;
return function(text, target) { return function(text, target) {
if (!text) return text; if (!text) return text;
@@ -610,8 +640,10 @@ angular.module('ngSanitize').filter('linky', ['$sanitize', function($sanitize) {
while ((match = raw.match(LINKY_URL_REGEXP))) { while ((match = raw.match(LINKY_URL_REGEXP))) {
// We can not end in these as they are sometimes found at the end of the sentence // We can not end in these as they are sometimes found at the end of the sentence
url = match[0]; url = match[0];
// if we did not match ftp/http/mailto then assume mailto // if we did not match ftp/http/www/mailto then assume mailto
if (match[2] == match[3]) url = 'mailto:' + url; if (!match[2] && !match[4]) {
url = (match[3] ? 'http://' : 'mailto:') + url;
}
i = match.index; i = match.index;
addText(raw.substr(0, i)); addText(raw.substr(0, i));
addLink(url, match[0].replace(MAILTO_REGEXP, '')); addLink(url, match[0].replace(MAILTO_REGEXP, ''));
@@ -630,13 +662,13 @@ angular.module('ngSanitize').filter('linky', ['$sanitize', function($sanitize) {
function addLink(url, text) { function addLink(url, text) {
html.push('<a '); html.push('<a ');
if (angular.isDefined(target)) { if (angular.isDefined(target)) {
html.push('target="'); html.push('target="',
html.push(target); target,
html.push('" '); '" ');
} }
html.push('href="'); html.push('href="',
html.push(url); url.replace(/"/g, '&quot;'),
html.push('">'); '">');
addText(text); addText(text);
html.push('</a>'); html.push('</a>');
} }

19438
gui/default/vendor/angular/angular.js vendored
View File

File diff suppressed because it is too large Load Diff