refactor($templateRequest): move $sce checks and trust the cache#12240
refactor($templateRequest): move $sce checks and trust the cache#12240rjamet wants to merge 3 commits intoangular:masterfrom
Conversation
Move all the calls to $sce.getTrustedUrl inside $templateRequest, and also trust the contents of the cache. This allows prefetching templates and to bypass the checks on things where they make no sense, like templates specified in script tags. Fixes both angular#12219 and angular#12220.
src/ng/templateRequest.js
Outdated
There was a problem hiding this comment.
nit: an update on the description would be nice
|
Overall, looks good. If possible, would like to see some numbers to know if this PR has any performance implications |
The previous changes to $templateRequest were not documented, they now are.
|
I updated the description as you asked. Regarding performance, the only impact I see is that we will do more cache lookups and less white/blacklisting, but I'm not sure of the overall effect or how to measure it. |
test/ng/compileSpec.js
Outdated
There was a problem hiding this comment.
It's not, I removed it.
|
@lgalfaso this likely has performance implications on |
|
@wesleycho, @lgalfaso I don't expect any significant perf impact. the watch in ngInclude should not cause problems because ngInclude doesn't do any deep watching. |
Move all the calls to $sce.getTrustedUrl inside $templateRequest, and also trust the contents of the cache. This allows prefetching templates and to bypass the checks on things where they make no sense, like templates specified in script tags. Closes angular#12219 Closes angular#12220 Closes angular#12240
6 participants
Move all the calls to $sce.getTrustedUrl inside $templateRequest, and
also trust the contents of the cache. This allows prefetching templates
and to bypass the checks on templates directly populated in the cache,
like for instance templates specified in script tags.
Fixes both #12219 and #12220.