{"push_id":603080626,"size":3,"distinct_size":3,"ref":"refs/heads/master","head":"d8492f43319f95c4b03123142697f5d6e1b2e358","before":"3613a6007c8bebee6e9eb6da0fb668ad5e5fd245","commits":[{"sha":"9e8a687c370297688d59bcfa430d2142255302b6","author":{"email":"62fea0e2c13a980002264baf2602579d87ec71c7@rodyhaddad.com","name":"rodyhaddad"},"message":"chore(security): add warning banner to top of security sensitive files","distinct":true,"url":"https://api.github.com/repos/ze-pequeno/angular.js/commits/9e8a687c370297688d59bcfa430d2142255302b6"},{"sha":"67688d5ca00f6de4c7fe6084e2fa762a00d25610","author":{"email":"62fea0e2c13a980002264baf2602579d87ec71c7@rodyhaddad.com","name":"rodyhaddad"},"message":"fix($sanitize): disallow unsafe svg animation tags\n\nAfter #11124 got merged, a security vulnerability got introduced.\nAnimation in SVG became tolerated by the sanitizer.\n\nExploit Example:\n```\n<svg>\n  <a xmlns:xlink=\"http://www.w3.org/1999/xlink\" xlink:href=\"?\">\n    <circle r=\"400\"></circle>\n    <animate attributeName=\"xlink:href\" begin=\"0\" from=\"javascript:alert(1)\" to=\"&\" />\n  </a>\n</svg>\n```\n\nHere we are animating an anchor's href, starting from a value that's a javascript URI,\nallowing the executing of arbitrary javascript in the process.\n\nPreventing only the animation of links is tricky, as SVG is weird and namespaces aren't predictable.\nWe've decided to have the sanitizer filter out svg animation tags instead.\n\nConsidering the sanitizer is commonly used to sanitize untrusted HTML code, this shouldn't affect\nmany apps in the wild. Also, no release has been with #11124 in it, but not this fix.\n\nCloses #11290","distinct":true,"url":"https://api.github.com/repos/ze-pequeno/angular.js/commits/67688d5ca00f6de4c7fe6084e2fa762a00d25610"},{"sha":"d8492f43319f95c4b03123142697f5d6e1b2e358","author":{"email":"5c3d63b73a2b66b34b0b60ee393cbda49a1b9a8e@gmail.com","name":"svershin"},"message":"docs(misc/Downloading): update o latest stable version\n\nUpdated the CDN link and description to 1.3.14\n\nCloses #11327","distinct":true,"url":"https://api.github.com/repos/ze-pequeno/angular.js/commits/d8492f43319f95c4b03123142697f5d6e1b2e358"}]}