From 056c8493521988dbb330c6636135b505737da918 Mon Sep 17 00:00:00 2001 From: Brady Isom Date: Mon, 23 Dec 2013 13:13:41 -0700 Subject: [PATCH] fix($sanitize): consider `size` attribute as valid/allowed attribute The "size" attribute gets set on elements when using HTML5 rich text editors, or elements with the contenteditable attribute, that rely on the 'fontSize' command (execCommand). Closes #5522 --- src/ngSanitize/sanitize.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ngSanitize/sanitize.js b/src/ngSanitize/sanitize.js index 1e424d693134..5e45eb338b47 100644 --- a/src/ngSanitize/sanitize.js +++ b/src/ngSanitize/sanitize.js @@ -206,7 +206,7 @@ var validAttrs = angular.extend({}, uriAttrs, makeMap( 'abbr,align,alt,axis,bgcolor,border,cellpadding,cellspacing,class,clear,'+ 'color,cols,colspan,compact,coords,dir,face,headers,height,hreflang,hspace,'+ 'ismap,lang,language,nohref,nowrap,rel,rev,rows,rowspan,rules,'+ - 'scope,scrolling,shape,span,start,summary,target,title,type,'+ + 'scope,scrolling,shape,size,span,start,summary,target,title,type,'+ 'valign,value,vspace,width')); function makeMap(str) {