| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2011, the Dart project authors. Please see the AUTHORS file | |
| 2 // for details. All rights reserved. Use of this source code is governed by a | |
| 3 // BSD-style license that can be found in the LICENSE file. | |
| 4 | |
| 5 // TODO(sigmund): move this library to a shared package? or make part of | |
| 6 // dart:html? | |
| 7 library polymer.safe_html; | |
| 8 | |
| 9 /** Declares a string that is a well-formed HTML fragment. */ | |
| 10 class SafeHtml { | |
| 11 | |
| 12 /** Underlying html string. */ | |
| 13 final String _html; | |
| 14 | |
| 15 // TODO(sigmund): provide a constructor that does html validation | |
| 16 SafeHtml.unsafe(this._html); | |
| 17 | |
| 18 String toString() => _html; | |
| 19 | |
| 20 operator ==(other) => other is SafeHtml && _html == other._html; | |
| 21 int get hashCode => _html.hashCode; | |
| 22 } | |
| 23 | |
| 24 /** | |
| 25 * Declares a string that is safe to use in a Uri attribute, such as `<a href=`, | |
| 26 * to avoid cross-site scripting (XSS) attacks. | |
| 27 */ | |
| 28 class SafeUri { | |
| 29 final String _uri; | |
| 30 | |
| 31 // TODO(sigmund): provide a constructor that takes or creates a Uri and | |
| 32 // validates that it is safe (not a javascript: scheme, for example) | |
| 33 SafeUri.unsafe(this._uri); | |
| 34 | |
| 35 String toString() => _uri; | |
| 36 | |
| 37 operator ==(other) => other is SafeUri && _uri == other._uri; | |
| 38 int get hashCode => _uri.hashCode; | |
| 39 } | |
| OLD | NEW |