angular-sanitize.js strips id attribute for img tag

[poonambaviskar]

Can we just include 'id' in the whitelist, i.e htmlAttrs variable in angular-sanitize.js?? Doing this does not remove id attribute from img tag.

[petebacondarwin]

It looks like the commit that put this in (2bbced2) does not give the reasoning.

In #8719, @caitp suggests that it might have simply been to remove duplicate name and id values...

[mhevery]

the reason why we strip out id and name is that browsers put them on window

<div id="angular"> would overwrite the window.angular with an element. This is considered a security issue and so we don't allow it.