This release reverts the fix in 1.2.31 and provides an alternative fix that doesn't break Angular Material.
- input: ensure that hidden input values are correct after history back (ed44dd065)
- $compile: ensure that hidden input values are correct after history back (b8a0ecdd6)
- input: ensure that hidden input values are correct after history back (7ec663fc)
Note: This release contains some security fixes that required breaking changes. Since the legacy 1.2.x branch is the only version branch that supports IE8, it was necessary to introduce a couple of low-impact breaking changes in a patch release - something we generally avoid - in order to make the fixes available to people that still need IE8 support.
- $compile:
- ngSanitize: blacklist the attribute
usemap
as it can be used as a security exploit (ac0d5286, #14903) - ngAnimate: do not use event.timeStamp anymore for time tracking (8d83b563, #13494, #13495)
- $compile: due to f35f334b,
link[href]
attributes are now protected via $sce
, which prevents interpolated values that fail
the RESOURCE_URL
context tests from being used in interpolation. For example if the application is
running at https://mydomain.org/
then the following will fail:
<link rel="stylesheet" href="{{ 'https://otherdomain.org/unsafe.css' }}" />
By default, RESOURCE_URL
safe URLs are only allowed from the same domain and protocol as the
application document. To use URLs from other domains and/or protocols, you may either whitelist them
using $sceDelegateProvider.resourceUrlWhitelist(...)
or wrap them into a trusted value by calling
$sce.trustAsResourceUrl(url)
.
- ngSanitize: due to 234053fc,
The $sanitize
service will now remove instances of the usemap
attribute from any elements passed
to it.
This attribute is used to reference another element by name
or id
. Since the name
and id
attributes are already blacklisted, a sanitized usemap
attribute could only reference unsanitized
content, which is a security risk.
- $browser: prevent infinite digests when clearing the hash of a url (9845cee6, #9629, #9635, #10228, #10308)
- $compile: workaround for IE11 MutationObserver (fccce96d, #11781, #12613)
- $location: strip off empty hash segments when comparing (e81b2f72, #9635, #10748)
- $parse:
- ngAnimate: ensure that minified repaint code isn't removed (b041b664, #9936)
- $route: fix redirection with optional/eager params (1b9e408d, #9742, #10202)
- linky: encode double quotes when serializing email addresses (929dd15b, #8945, #8964, #5946, #10090, #9256)
- $animate: clear the GCS cache even when no animation is detected (f619d032, #8813)
- $browser:
- $http: add missing shortcut methods and missing docs (ec4fe1bc, #9180, #9321)
- $location:
- $parse: add quick check for Function constructor in fast path (756640f5)
- $parse, events: prevent accidental misuse of properties on $event (4d0614fd, #9969)
- ngMock: $httpBackend should match data containing Date objects correctly (1426b029, #5127)
- orderBy: sort by identity if no predicate is given (45b896a1, #5847, #4579, #9403)
- select: ensure the label attribute is updated in Internet Explorer (16833d0f, #9621, #10042)
- $http: don't parse single space responses as JSON (6f19a6fd, #9907)
- minErr: stringify non-JSON compatible objects in error messages (cf43ccdf, #10085)
- $rootScope: handle cyclic references in scopes when creating error messages (e80053d9, #10085)
- ngRepeat: support cyclic object references in error messages (fa12c3c8, #9838, #10065, #10085)
- ngMock: call $interval callbacks even when invokeApply is false (d81ff888, #10032)
- ngPattern: match behaviour of native HTML pattern attribute (85eb9660, #9881, #9888)
- select: ensure the label attribute is updated in Internet Explorer (6604c236, #9621, #10042)
- $location: allow to location to be changed during $locationChangeStart (a9352c19, #9607, #9678)
- $routeProvider: allow setting caseInsensitiveMatch on the provider (0db573b7, #6477, #9873)
- $compile: do not rebind parent bound transclude functions (841c0907, #9413)
- $parse:
- $parse, events: prevent accidental misuse of properties on $event (e057a9aa)
- ngRoute: allow proto inherited properties in route params object (b4770582, #8181, #9731)
- select: use strict comparison for isSelected with selectAs (9e305948, #9639, #9949)
- ngAria: announce ngMessages with aria-live (187e4318, #9834)
- ngMock: decorator that adds Scope#$countChildScopes and Scope#$countWatchers (74981c9f, #9926, #9871)
This release also contains security fixes for expression sandbox bypasses.
These issues affect only applications with known server-side XSS holes that are also using CSP to secure their client-side code. If your application falls into this rare category, we recommend updating your version of Angular.
We'd like to thank security researches Sebastian Lekies, Jann Horn, and Gábor Molnár for reporting these issues to us.
We also added a documentation page focused on security, which contains some of the best practices, DOs and DON'Ts. Please check out https://docs.angularjs.org/guide/security.
- $compile: returning null when an optional controller is not found (2cd5b4ec, #9404, #9392)
- $observe: check if the attribute is undefined (531a8de7, #9707, #9720)
- $parse: support dirty-checking objects with null prototype (28661d1a, #9568)
- $sce: use msie instead of $document[0].documentMode (45252c3a, #9661)
- $templateRequest: ignore JSON Content-Type header and content (1bd473eb, #5756, #9619)
- i18n: rename datetimeSymbols to be camelCase (94f5a285)
- loader: fix double spaces (8b2f1a47, #9630)
- ngMock: $httpBackend should match data containing Date objects correctly (1025f6eb, #5127)
- ngSanitize: attribute name: xmlns:href -> xlink:href (4cccf0f2, #9769)
- select: assign result of track exp to element value (4b4098bf, #9718, #9592)
- templateRequest: allow empty html template (52ceec22, #9581)
- testability: escape regex chars in
findBindings
if usingexactMatch
(02aa4f4b, #9595, #9600)
- $compile: allow $watchCollection to be used in bi-directional bindings (40bbc981, #9725)
- ngSanitize: accept SVG elements and attributes (a54b25d7, #9578, #9751)
- $browser:
- $http:
- $injector: ensure $get method invoked with provider context (372fa699, #9511, #9512)
- $location: use clone of passed search() object (c7a9009e, #9445)
- $parse: stabilize one-time literal expressions correctly (874cac82)
- formController: remove scope reference when form is destroyed (01f50e1a, #9315)
- jqLite: remove native listener when all jqLite listeners were deregistered (d71fb6f2, #9509)
- select:
- $anchorScroll: support a configurable vertical scroll offset (09c39d2c, #9368, #2070, #9360)
- $animate:
- currencyFilter: add fractionSize as optional parameter (20685ffe, #3642, #3461, #3642, #7922)
- jqLite: add private jqLiteDocumentLoaded function (0dd316ef)
- $animate: due to e5f4d7b1,
staggering animations that use transitions will now
always block the transition from starting (via
transition: 0s none
) up until the stagger step kicks in. The former behaviour was that the block was removed as soon as the pending class was added. This fix allows for styles to be applied in the pending class without causing an animation to trigger prematurely.
- $anchorScroll: don't scroll to top when initializing and location hash is empty (d5445c60, #8848, #9393)
- $animate:
- ensure hidden elements with ngShow/ngHide stay hidden during animations (39d0b368, #9103, #9493)
- permit class-based animations for leave operations if ngAnimateChildren is enabled (df1a00b1, #8092, #9491)
- ensure that class-based animations only consider the most recent DOM operations (c93924ed, #8946, #9458)
- abort class-based animations if the element is removed during digest (613d0a32, #8796)
- clear the GCS cache even when no animation is detected (cb85cbce, #8813)
- $browser:
- $compile:
- $http: honor application/json response header and parse json primitives (7b6c1d08, #2973)
- $injector: throw when factory $get method does not return a value (0d3b69a5, #4575, #9210)
- $location: allow
0
inpath()
andhash()
(b8c5b871) - form: fix submit prevention (86c7d122, #3370, #3776)
- ngAnimate: defer DOM operations for changing classes to postDigest (667183a8, #8234, #9263)
- orderBy: sort by identity if no predicate is given (607f016a, #5847, #4579, #9403)
- select:
- $compile: due to feba0174,
If a template contains directives within comment nodes, and there is more than a single node in the template, those comment nodes are removed. The impact of this breaking change is expected to be quite low.
Closes #9212 Closes #9215
- ngAnimate: due to 667183a8,
The $animate
CSS class API will always defer changes until the end of the next digest. This allows ngAnimate
to coalesce class changes which occur over a short period of time into 1 or 2 DOM writes, rather than
many. This prevents jank in browsers such as IE, and is generally a good thing.
If you find that your classes are not being immediately applied, be sure to invoke $digest()
.
Closes #8234 Closes #9263
- $select: due to 30996f8
ngOptions
will now throw an error when the comprehension expressions contains both a select as
and track by
expression.
These expressions are fundamentally incompatible because it is not possible to reliably and
consistently determine the parent object of a model, since select as
can assign any child of a
value
as the model value.
Prior to refactorings in this release, neither of these expressions worked correctly independently, and did not work at all when combined.
See #6564
- $route: due to f4ff11b0,
Order of events has changed.
Previously: $locationChangeStart
-> $locationChangeSuccess
-> $routeChangeStart
-> $routeChangeSuccess
Now: $locationChangeStart
-> $routeChangeStart
-> $locationChangeSuccess
-> -> $routeChangeSuccess
Fixes #5581 Closes #5714 Closes #9502- ngAnimate: due to 667183a8,
The $animate class API will always defer changes until the end of the next digest. This allows ngAnimate to coalesce class changes which occur over a short period of time into 1 or 2 DOM writes, rather than many. This prevents jank in browsers such as IE, and is generally a good thing.
If you're finding that your classes are not being immediately applied, be sure to invoke $digest().
Closes #8234 Closes #9263
- $compile:
- input:
- ngModel: do not parse undefined viewValue when validating (92f05e5a, #9106, #9260)
- ngView: use animation promises ensure that only one leave animation occurs at a time (3624e380, #9355, #7606, #9374)
- select: make ctrl.hasOption method consistent (2bcd02dc, #8761)
- $compile: optionally get controllers from ancestors only (07e3abc7, #4518, #4540, #8240, #8511)
- Scope: allow the parent of a new scope to be specified on creation (6417a3e9)
- $rootScope: moving internal queues out of the Scope instances (b1192518, #9071)
- benchmark: add ngBindOnce benchmarks to largetable-bp (2c8b4648)
- ngForm,ngModel: move initial addClass to the compile phase (b1ee5386, #8268)
- $compile: due to fb0c77f0,
$transclude
functions no longer attach $destroy
event handlers to the
transcluded content, and so the associated transclude scope will not automatically
be destroyed if you remove a transcluded element from the DOM using direct DOM
manipulation such as the jquery remove()
method.
If you want to explicitly remove DOM elements inside your directive that have been compiled, and so potentially contain child (and transcluded) scopes, then it is your responsibility to get hold of the scope and destroy it at the same time.
The suggested approach is to create a new child scope of your own around any DOM elements that you wish to manipulate in this way and destroy those scopes if you remove their contents - any child scopes will then be destroyed and cleaned up automatically.
Note that all the built-in directives that manipulate the DOM (ngIf, ngRepeat, ngSwitch, etc) already follow this best practice, so if you only use these for manipulating the DOM then you do not have to worry about this change.
Closes #9095 Closes #9281
-
$parse: due to 5572b40b,
-
$scope['this'] no longer exits on the $scope object
-
$parse-ed expressions no longer allow chaining 'this' such as this['this'] or $parent['this']
-
'this' in $parse-ed expressions can no longer be overriden, if a variable named 'this' is put on the scope it must be accessed using this['this']
Closes #9105
- input: due to 1eda1836,
(Note: this change landed in 1.3.0-rc.3, but was not considered a breaking change at the time).
For text based inputs (text, email, url), the $viewValue
will now always be converted to a string,
regardless of what type the value is on the model.
To migrate, any code or expressions that expect the $viewValue
to be anything other than string
should be updated to expect a string.
- input: due to a0bfdd0d60882125f614a91c321f12f730735e7b (see #8949),
Similar to input[number]
Angular will now throw if the model value
for a input[date]
is not a Date
object. Previously, Angular only
showed an empty string instead.
Angular does not set validation errors on the <input>
in this case
as those errors are shown to the user, but the erroneous state was
caused by incorrect application logic and not by the user.
- $compile: Resolve leak with asynchronous compilation (5c9c1973, #9199, #9079, #8504, #9197)
- select: make ctrl.hasOption method consistent (11d2242d, #8761)
- $location: add ability to opt-out of
<base>
tag requirement in html5Mode (dc3de7fb, #8934) - formController: add $setUntouched to propagate untouched state (fd899755, #9050)
- input: support dynamic element validation (729c238e, #4791, #1404)
- ngAria: add an ngAria module to make a11y easier (d1434c99, #5486)
- map: use Array.prototype.map (a591e8b8)
-
$location: due to dc3de7fb, The $location.html5Mode API has changed to allow enabling html5Mode by passing an object (as well as still supporting passing a boolean). Symmetrically, the method now returns an object instead of a boolean value.
To migrate, follow the code example below:
Before:
var mode = $locationProvider.html5Mode();
After:
var mode = $locationProvider.html5Mode().enabled;
Fixes #8934
- i18n: fix typo at i18n generation code (1b6d74cc)
- ngLocale: Regenerate Locale Files (06c76694)
- select: update option labels when model changes (d89d59f4, #9025)
- $compile: update
'@'
-bindings in controller whenbindToController
istrue
(e7ac08a0, #9052, #9077) - $parse: ensure CSP assignable expressions have
assign()
(d13b4bd1, #9048) - i18n: fix typo at i18n generation code (eb4afd45)
- input: always pass in the model value to
ctrl.$isEmpty
(3e51b84b, #5164, #9017) - jqLite: fix
event.stopImmediatePropagation()
so it works as expected (30354c58, #4833) - ngLocale: Regenerate Locale Files (6a96a820, #8931, #8583, #7799)
- ngModel:
- ngResource: make badcfg error message more helpful (a3962f0d, #9005, #9010)
- select: update option labels when model changes (46274102, #9025)
- limitTo: support numeric input to limitTo (1c8a7459, #8926)
- ngInclude: add template url parameter to events (fd2d6c02, #8453, #8454)
- $compile: move
$$isolateBinding
creation to directive factory instead of on each link (56f09f0b) - $parse:
- $parse: due to fca6be71, all filters are assumed to be stateless functions
Previously it was just a good practice to make all filters stateless. Now it's a requirement in order for the model change-observation to pick up all changes.
If an existing filter is statefull, it can be flagged as such but keep in
mind that this will result in a significant performance-penalty (or rather
lost opportunity to benefit from a major perf improvement) that will
affect the $digest
duration.
To flag a filter as stateful do the following:
myApp.filter('myFilter', function() {
function myFilter(input) { ... };
myFilter.$stateful = true;
return myFilter;
});
- $location:
- $parse: disallow passing Function to Array.sort (bd8ad0fb)
- input: check
scope.$$phase
only on$rootScope
(bf59d727) - ngAnimate: support removing classes from SVG elements when using jQuery (b3b67213, #8872, #8893)
- ngEventDirs: check
scope.$$phase
only on$rootScope
(203ea10f, #8891) - ngForm: don't clear validity of whole form when removing control (953ee22f, #8863)
- ngInclude: correctly add svg-namespaced template content (6639ca9d, #7538, #8981, #8997)
- ngModel:
- update model value with async validators correctly (64c3b745)
- render immediately also with async validators (f94d5515)
- properly parse min/max date values as strings for date inputs (088545c1, #6755)
- revalidate the model when min/max expression values change for date inputs (b3502835, #6755)
- consider ngMin/ngMax values when validating number input types (25541c1f)
- revalidate the model when min/max expression values change for number inputs (7b273a2c, #2404)
- ngModelOptions: do not trigger digest on
setViewValue
if debouncing (e322cd9b, #8814, #8850, #8911) - ngRepeat: preserve original position of elements that are being animated away (ed637330, #8918, #8994)
- ngSwitch: ensure correct iterator is passed to async function (712299c2, #8833)
- numberFilter: format numbers that round to zero as nonnegative (ae952fbf, #8489)
- orderBy: allow arrayLike objects to be ordered (cbdaabfb, #8944)
- angular.forEach: add the array/object as the 3rd param like the native array forEach (df9e60c8, #7902)
- ngModelOptions: add allowInvalid option (3c538c1d, #8290, #8313)
- $parse:
- extend: remove use of forEach to remove calls/closures/passing arguments (9bedeb33, #8898)
- jQuery: only trigger $destroy if a handler exists (f6aa1c55, #8859)
-
ngModelController,formController: due to 6046e14b,
-
ctrl.$error
no longer contains entries for validators that were successful. -
ctrl.$setValidity
now differentiates betweentrue
,false
,undefined
andnull
, instead of previously only truthy vs falsy.
Closes #8941- ngSwitch: due to 0f806d96,
Ever since 0df93fd, tagged in v1.0.0rc1, the ngSwitch directive has had an undocumented change
attribute, used for evaluating a scope expression when the switch value changes.
While it's unlikely, applications which may be using this feature should work around the removal by adding a custom directive which will perform the eval instead. Directive controllers are re-instantiated when being transcluded, so by putting the attribute on each item that you want to be notified of a change to, you can more or less emulate the old behaviour.
Example:
angular.module("switchChangeWorkaround", []).
directive("onSwitchChanged", function() {
return {
link: function($scope, $element, $attrs) {
$scope.$parent.$eval($attrs.onSwitchChanged);
}
};
});
<div ng-switch="switcher">
<div ng-switch-when="a" on-switch-changed="doSomethingInParentScope()"></div>
<div ng-switch-when="b" on-switch-changed="doSomethingInParentScope()"></div>
</div>
Closes #8858 Closes #8822
- $browser: detect changes to the browser url that happened in sync (2ece4d03, #6976)
- $compile:
- $location:
- $parse: disallow passing Function to Array.sort (b39e1d47)
- form: ensure concurrent animations use setClass (d7548fdf, #8166)
- input: check
scope.$$phase
only on$rootScope
(36e6de1d) - ngEventDirs:
- ngRepeat: improve errors for duplicate items (1812af58)
- numberFilter: format numbers that round to zero as nonnegative (7e02fa07, #8489)
- orderBy: allow arrayLike objects to be ordered (94b0f2d3, #8944)
- ngEventDirs: due to 54f0bc0f,
The blur
and focus
event fire synchronously, also during DOM operations
that remove elements. This lead to errors as the Angular model was not
in a consistent state. See this fiddle for a demo.
This change executes the expression of those events using
scope.$evalAsync
if an $apply
is in progress, otherwise
keeps the old behavior.
Fixes #4979 Fixes #5945 Closes #8803 Closes #6910 Closes #5402
- $animate:
- $browser: detect changes to the browser url that happened in sync (3be00df4, #6976)
- $compile: use the correct namespace for transcluded svg elements (cb73a37c, #8808, #8816)
- $location: always resolve relative links in html5mode to
<base>
url (22948807, #8492, #8172) - $parse: properly handle dots at the end of identifiers (8ac90357, #4613, #4912, #8559)
- Angular: remove duplicate nodeName_ references (a4520a74)
- currencyFilter: pass through null and undefined values (c2aaddbe, #8605)
- docs: don't throw exception on the 404 page (550ba01b, #8518)
- input:
- ngBindHtml: throw error if interpolation is used in expression (cd21602d, #8824)
- ngEventDirs: execute
blur
andfocus
expression usingscope.$evalAsync
(719c747c, #4979, #5945, #8803, #6910, #5402) - ngModel:
- ngRepeat: improve errors for duplicate items (0604bb7b)
- ngSwitch: avoid removing DOM nodes twice within watch operation (c9b0bfec, #8662)
- numberFilter: pass through null and undefined values (2ae10f67, #8605, #8842)
- core:
- add angular.reloadWithDebugInfo() (41c1b88)
- $animate:
- $compile:
- $compile/ngBind: allow disabling binding info (3660fd09)
- $http: implement mechanism for coalescing calls to $apply in $http (ea6fc6e6, #8736, #7634, #5297)
- $rootScope: implement $applyAsync to support combining calls to $apply into a single digest. (e94d454b)
- $templateRequest: introduce the $templateRequest service (a70e2833)
- filter: allow to define the timezone for formatting dates (4739b1d9)
- filterFilter: pass index to function predicate (46343c60, #654)
- input: allow to define the timezone for parsing dates (cc6fc199, #8447)
- minErr: allow specifying ErrorConstructor in minErr constructor (a6bd4bc8)
- ngModel: provide validation API functions for sync and async validations (2ae4f40b)
- ngRoute: alias string as redirectTo property in .otherwise() (3b5d75c0, #7794)
- testability: add $$testability service (85880a64)
- $compile:
- nodeName_: simplify the code and reduce the number of DOM calls (5a1a0c96)
- select: execute render after $digest cycle (6f7018d5, #8825)
- $location: due to 22948807
Angular now requires a <base>
tag when html5 mode of $location
is enabled. Reasoning:
Using html5 mode without a <base href="...">
tag makes relative links for images, links, ...
relative to the current url if the browser supports
the history API. However, if the browser does not support the history API Angular falls back to using the #
,
and then all those relative links would be broken.
The <base>
tag is also needed when a deep url is loaded from the server, e.g. http://server/some/page/url
.
In that case, Angular needs to decide which part of the url is the base of the application, and which part
is path inside of the application.
To summarize: Now all relative links are always relative to the <base>
tag.
Exception (also a breaking change):
Link tags whose href
attribute starts with a #
will only change the hash of the url, but nothing else
(e.g. <a href="#someAnchor">
). This is to make it easy to scroll to anchors inside a document.
Related to #6162 Closes #8492
In html5 mode without a <base>
tag on older browser that don't support the history API
relative paths were adding up. E.g. clicking on <a href="page1">
and then on <a href="page2">
would produce $location.path()==='/page1/page2'
. The code that introduced this behavior was removed
and Angular now also requires a <base>
tag to be present when using html5 mode.
Closes #8172, #8233
- ngInclude, ngMessage, ngView and directives that load templates: due to a70e2833
Angular will now throw a $compile minErr each a template fails to download for ngView, directives and ngMessage template requests. This changes the former behavior of silently ignoring failed HTTP requests--or when the template itself is empty. Please ensure that all directive, ngView and ngMessage code now properly addresses this scenario. NgInclude is uneffected from this change.
- $animate: due to 23da6140
If any stagger code consisted of having BOTH transition staggers and delay staggers together then that will not work the same way. Angular will now instead choose the highest stagger delay value and set the timeout to wait for that before applying the active CSS class.
- $animate: due to bf0f5502
Both the API for the cancallation method and the done callback for $animate animations is different. Instead of using a callback function for each of the $animate animation methods, a promise is used instead.
//before
$animate.enter(element, container, null, callbackFn);
//after
$animate.enter(element, container).then(callbackFn);
The animation can now be cancelled via $animate.cancel(promise)
.
//before
var cancelFn = $animate.enter(element, container);
cancelFn(); //cancels the animation
//after
var promise = $animate.enter(element, container);
$animate.cancel(promise); //cancels the animation
keep in mind that you will still need to run $scope.$apply inside of the then
callback
to trigger a digest.
- $animate: due to 2f4437b3
$animate.addClass, $animate.removeClass and $animate.setClass will no longer start the animation right after being called in the directive code. The animation will only commence once a digest has passed. This means that all animation-related testing code requires an extra digest to kick off the animation.
//before this fix
$animate.addClass(element, 'super');
expect(element).toHaveClass('super');
//now
$animate.addClass(element, 'super');
$rootScope.$digest();
expect(element).toHaveClass('super');
$animate will also tally the amount of times classes are added and removed and only animate the left over classes once the digest kicks in. This means that for any directive code that adds and removes the same CSS class on the same element then this may result in no animation being triggered at all.
$animate.addClass(element, 'klass');
$animate.removeClass(element, 'klass');
$rootScope.$digest();
//nothing happens...
- $compile/ngBind: due to 3660fd09,
The value of $binding
data property on an element is always an array now
and the expressions do not include the curly braces {{ ... }}
.
- currencyFilter: due to c2aaddbe, previously the currency filter would convert null and undefined values into empty string, after this change these values will be passed through.
Only cases when the currency filter is chained with another filter that doesn't expect null/undefined will be affected. This should be very rare.
This change will not change the visual output of the filter because the interpolation will convert the null/undefined to an empty string.
Closes #8605
- numberFilter: due to 2ae10f67, previously the number filter would convert null and undefined values into empty string, after this change these values will be passed through.
Only cases when the number filter is chained with another filter that doesn't expect null/undefined will be affected. This should be very rare.
This change will not change the visual output of the filter because the interpolation will convert the null/undefined to an empty string.
Closes #8605 Closes #8842
- input:
- due to 77ce5b89,
NgModel.viewValue will always be used when rendering validations for minlength
and maxlength
.
Closes #7967 Closes #8811
- input:
- due to 29f0b568,
According to the HTML5 spec input[time]
should create dates
based on the year 1970 (used to be based on the year 1900).
Related to #8447.
- ngModel: due to db044c40
Any parser code from before that returned an undefined
value
(or nothing at all) will now cause a parser failure. When this occurs
none of the validators present in $validators
will run until the parser
error is gone. The error will be stored on ngModel.$error
.
- ngEventDirs: due to 719c747c,
The blur
and focus
event fire synchronously, also during DOM operations
that remove elements. This lead to errors as the Angular model was not
in a consistent state. See this fiddle for a demo.
This change executes the expression of those events using
scope.$evalAsync
if an $apply
is in progress, otherwise
keeps the old behavior.
Fixes #4979 Fixes #5945 Closes #8803 Closes #6910 Closes #5402
- $location:
- $sanitize: sanitize javascript urls with comments (4f387050, #8274)
- Angular: make Date comparison in equals() NaN-aware (98f60372, #8650, #8715)
- copy: clear array destinations correctly for non-array sources (888b0f54, #8610, #8702)
- input:
- linky: handle quotes around email addresses (effc98fd, #8520)
- minErr: encode btstrpd error input to strip angle brackets (aaf9c5e5, #8683)
- ngHref: remove attribute when empty value instead of ignoring (ed56872b, #2755)
- input: due to ebece0bc,
Previously, input[type=password]
would trim values by default, and would require an explicit ng-trim="false"
to disable the trimming behaviour. After this CL, ng-trim
no longer affects input[type=password]
, and will
never trim the password value.
Closes #8250 Closes #8230
- $compile:
- $location:
- $parse: remove unused variable declaration in generated getters (6acea115)
- $sanitize: sanitize javascript urls with comments (b7e82a33, #8274)
- $watchGroup: call listener once when the
watchExpressions
array is empty (bf0e8373) - Angular: make Date comparison in
equals()
NaN
-aware (693e846a, #8650, #8715) - Scope: don't clear the phase when an exception is thrown from asyncQueue or watch (bf1a57ad)
- copy: clear array destinations correctly for non-array sources (a603e202, #8610, #8702)
- forEach: match behaviour of Array.prototype.forEach (ignore missing properties) (36230194, #8510, #8522, #8525)
- input:
- jQuery: cooperate with other libraries monkey-patching jQuery.cleanData (b9389b26, #8471)
- jqLite:
- linky: handle quotes around email addresses (a9d22712, #8520)
- minErr: encode btstrpd error input to strip angle brackets (0872388a, #8683)
- ngRepeat:
- $compile:
- benchpress: configure benchpress grunt task (6bdaa4bc)
- jqLite: implement the
detach
method (1a05daf5, #5461) - ngRoute: add method for changing url params (77a1acc7)
- $compile:
- don't register $destroy callbacks on element-transcluded nodes (b5f7970b)
- refactor publicLinkFn to simplify the code and use 'for in' loop (645625cf)
- clone the nodeList during linking only if necessary (3e0a2e1f)
- delay object initialization in nodeLinkFn (31ed0af7)
- optimize nodeLinkFn (35134a0e)
- optimize publicLinkFn (274e9c4d)
- $interpolate: do not keep empty separators (94b5c9f0)
- $parse:
- don't bind filters to a context (8863b9d0)
- optimize filter implementation (ece6ef47)
- speed up fn invocation for no args case (a17578ad)
- speed up fn invocation by optimizing arg collection (fecfc5b0)
- use no-proto maps as caches and avoid hasOwnProperty checks (d302ea0c)
- trim expression only if string (a1341223)
- $rootScope: do not use
Function::call
when not needed (7eae29e5) - Scope:
- benchpress: add benchpress node module and port over large table test (1229334f)
- isObject: use strict comparison (d208ba25)
- jqLite:
- simplify jqLiteDealoc (f8f7a1df)
- optimize event handler (d05f27e2)
- only take
str.split()
path when needed (187b1b8e, #8648) - optimize
off()
(abb17cce) - refactor jqLiteExpandoStore to minimize access to expensive element.ng339 expando property (1e8698b3)
- microoptimization in chaining fn (fafbd494)
- don't use String#split in on() unless we need it (bda673f8)
- don't check isString many times in constructor (443b521e)
- optimize jqLiteAcceptsData method (b493c62f)
- optimize
append()
andafter()
(8d933bf9) - don't register DOM listener for $destroy event (6251751a)
- optimize event listener registration (566f1015)
- improve createEventHandler method by switching from forEach to for loop (e9cd6dc0)
- don't use
forEach
inoff()
(960a8410) - don't recreate the Node.contains polyfill (d1536e7c)
- speed up shallowCopy and special case Attributes cloning (54fa16e4)
- ngBind: bypass jquery/jqlite when setting text (0a738ce1)
- ngRepeat:
- simplify code and remove duplicate array.length access (08eb0558)
- optimize marking of nodes that are being removed via an animation (36e35b2c)
- use no-proto objects for blockMaps (13d113c5)
- move work to compile fn (bdd853cb)
- move updateScope fn to factory and reuse it for all repeaters (e58d65a5)
- clone boundary comment nodes (fbd48845)
- $compile:
- due to 09de7b5d,
Now, ng-attr-*
will never add the attribute to the DOM if any of the interpolated expressions
evaluate to undefined
.
To work around this, initialize values which are intended to be the empty string with the empty string:
For example, given the following markup:
<div ng-attr-style="border-radius: {{value}}{{units}}"></div>
If $scope.value
is 4
, and $scope.units
is undefined
, the resulting markup is unchanged:
<div ng-attr-style="border-radius: {{value}}{{units}}"></div>
However, if $scope.units is ""
, then the resulting markup is updated:
<div ng-attr-style="border-radius: {{value}}{{units}}" style="border-radius: 4"></div>
Closes #8376 Closes #8399
- due to 0d608d04, element-transcluded directives now have an extra comment automatically appended to their cloned DOM
This comment is usually needed to keep track the end boundary in the event child directives modify the root node(s). If not used for this purpose it can be safely ignored.
- due to 75c4cbf8,
directive.type
was renamed todirective.templateNamespace
This change is breaking only within 1.3.0-beta releases: directive.type
was renamed to directive.templateNamespace
The property name type
was too general.
- $parse: due to 8863b9d0,
this
in filters is now undefined and no longer the scope
It's a bad practice for filters to have hidden dependencies, so pulling stuff from scope directly is not a good idea. Scope being the filter context was never documented as public API, so we don't expect that any significant code depends on this behavior.
If an existing filter has a dependency on the scope instance, the scope reference can be passed into the filter as a filter argument (this is highly discouraged for new code):
Before: {{ user.name | customFilter }}
After: {{ user.name | customFilter:this }}
- Scope: due to 0554c1aa,
deregisterNotifier
callback for$watch
is no longer available
This API was available only in the last few 1.3 beta versions and is not very useful for applications, so we don't expect that anyone will be affected by this change.
- input: due to a7fb357f,
by default, do not trim
input[type=password]
values.
Previously, input[type=password]
would trim values by default, and would require an explicit ng-trim="false"
to disable the trimming behaviour. After this change, ng-trim
no longer affects input[type=password]
, and will
never trim the password value.
Closes #8250 Closes #8230
- $compile: make '='-bindings NaN-aware (5038bf79, #8553, #8554)
- $location: add semicolon to whitelist of delimiters to unencode (36258033, #5019)
- $parse:
- Scope: add deregisterNotifier to oneTimeLiteralWatch signature (a001a417)
- jqLite:
- ngSanitize: ensure
html
is a string in htmlParser() (34781f18, #8417, #8416) - select:
- $parse: allow for assignments in ternary operator branches (2d678f1d, #8512, #8484)
- form: Add new $submitted state to forms (108a69be, #8056)
- http: allow caching for JSONP requests (3607c982, #1947, #8356)
- jQuery: upgrade to jQuery to 2.1.1 (9e7cb3c3)
- ngMock: allow override of when/expect definitions (477626d8, #5766, #8352)
- $q: move Deferred and Promise methods to prototypes (23bc92b1, #8300)
- input: prevent additional $digest when input is already touched (dd2a803f, #8450)
- jQuery: due to 9e7cb3c3, Angular no longer supports jQuery versions below 2.1.1.
- $q: due to 23bc92b1,
Promises methods are no longer enumerated when using for-loops with
hasOwnProperty
check. E.g.angular.extends
- $compile: make '='-bindings NaN-aware (0b0acb03, #8553, #8554)
- $parse: correctly assign expressions who's path is undefined and that use brackets notation (60366c8d, #8039)
- jqLite: allow
triggerHandler()
to accept custom event (d262378b, #8469, #8505) - ngSanitize: ensure
html
is a string in htmlParser() (9ee07551, #8417, #8416) - select:
- $parse: allow for assignments in ternary operator branches (93b0c2d8, #8512, #8484)
- http: allow caching for JSONP requests (eab5731a, #1947, #8356)
- angular.copy: clone regexp flags correctly (86340a59, #5781, #8337)
- docs: change plnkr form to open in same window (925b2080)
- jqLite: triggerHandler support unbind self (8a27abae, #5984)
- ngHref: remove attribute when empty value instead of ignoring (469ea338, #2755)
- $compile: change directive's restrict setting to default to EA (element/attribute) (11f5aeee, #8321)
- $q: add streamlined ES6-style interface for using $q (f3a763fd, #8311, #6427)
- ngRepeat: provide support for aliasing filtered repeater results as a scope member (e0adb9c4, #5919, #8046, #8282)
- $parse: don't use reflective calls in generated functions (c54228fb)
- $compile: due to 11f5aeee,
directives now match elements by default unless specific restriction rules are set via
restrict
property.
This means that if a directive 'myFoo' previously didn't specify matching restrictrion, it will now match both the attribute and element form.
Before:
<div my-foo></div>
<---- my-foo attribute matched the directive
<my-foo></my-foo>
<---- no match
After:
<div my-foo></div>
<---- my-foo attribute matched the directive
<my-foo></my-foo>
<---- my-foo element matched the directive
It is not expected that this will be a problem in practice because of widespread use of prefixes that make <my-foo>
like
elements unlikely.
Closes #8321
- $http: fix double-quoted date issue when encoding params (2f960f15, #8150, #6128, #8154)
- $location: handle plus character in query strings (60af504c, #3042)
- $rootScope: $watchCollection should handle NaN in objects (bf13d268, #7930)
- angular.copy: clone regexp flags correctly (e25ed0d4, #5781, #8337)
- csp: fix autodetection of CSP + better docs (0e5d3190, #8162, #8191)
- docs: change plnkr form to open in same window (5d11e020)
- jqLite: triggerHandler support unbind self (209e6000, #5984)
- ngHref: remove attribute when empty value instead of ignoring (948c86c6, #2755)
- ngRoute: remove unnecessary call to decodeURIComponent (1b779028, #6326, #6327)
- ngSanitize:
- orderBy: correctly order by date values (f1b28847, #6675, #6746)
- select: force visual update in IE (c0afbfac, #7692, #8158)
- $compile: only create jqLite object when necessary (71eb1901)
- $parse: don't use reflective calls in generated functions (cbdf0c2a)
- forEach: use native for loop instead of forEach for Arrays (492b0cdf)
- jqLite: expose the low-level jqLite.data/removeData calls (3c46c943)
- ngBindHtml: move addClass to the compile phase (8eede099, #8261)
- $cookie: use
decodeURIComponent
instead of unescape for cookie reading (1c9ab40d, #8125) - $http: fix double-quoted date issue when encoding params (9dce42b3, #8150, #6128, #8154)
- $location: handle plus character in query strings (3f4ee151, #3042)
- $rootScope:
- csp: fix autodetection of CSP + better docs (0113f225, #8162, #8191)
- ngList: use custom separators for re-joining list items (c6c9d26e, #4008, #2561, #4344)
- ngRoute: remove unnecessary call to
decodeURIComponent
(528f56a6, #6326, #6327) - ngSanitize: follow HTML parser rules for start tags / allow < in text content (f6681d41, #8212, #8193)
- ngSwitch:
- orderBy: correctly order by date values (92bceb5c, #6675, #6746)
- select: force visual update in IE (d7f73022, #7692, #8158)
- $compile: explicitly request multi-element directive behaviour (e8066c4b, #5372, #6574, #5370, #8044, #7336)
- ngList: use ngTrim to manage whitespace handling when splitting (8d18d20e)
- ngTransclude: allow ngTransclude to be used as an element (3dafcba9, #8141)
- $compile: only create jqLite object when necessary (a160f76f)
- bindOnce more performant interpolation and lazy one-time binding (86d55c1d)
- jqLite: expose the low-level jqLite.data/removeData calls (e4ba8943)
- ngBindHtml: move addClass to the compile phase (903e7352, #8261)
- $compile: due to e8066c4b, Directives which previously depended on the implicit grouping between directive-start and directive-end attributes must be refactored in order to see this same behaviour.
Before:
<div data-fancy-directive-start>{{start}}</div>
<p>Grouped content</p>
<div data-fancy-directive-end>{{end}}</div>
.directive('fancyDirective', function() {
return {
link: angular.noop
};
})
After:
<div data-fancy-directive-start>{{start}}</div>
<p>Grouped content</p>
<div data-fancy-directive-end>{{end}}</div>
.directive('fancyDirective', function() {
return {
multiElement: true, // Explicitly mark as a multi-element directive.
link: angular.noop
};
})
Closes #5372 Closes #6574 Closes #5370 Closes #8044 Closes #7336
- $rootScope: due to 02c0ed27,
Previously, it was possible for an action passed to $watch to be a string, interpreted as an angular expresison. This is no longer supported. The action now has to be a function. Passing an action to $watch is still optional.
Before:
$scope.$watch('state', ' name="" ');
After:
$scope.$watch('state', function () {
$scope.name = "";
});
Closes #8190
- bootstrap: due to 666a3835,
If using any of the mechanisms specified above, then migrate by
specifying the attribute ng-app
to the root element. E.g.
<div ng-app="module">...</div>
Closes #8147
- ngList: due to c6c9d26e,
The ngList
directive no longer supports splitting the view value
via a regular expression. We need to be able to re-join list items back
together and doing this when you can split with regular expressions can
lead to inconsistent behaviour and would be much more complex to support.
If your application relies upon ngList splitting with a regular expression then you should either try to convert the separator to a simple string or you can implement your own version of this directive for you application.
Closes #4008 Closes #2561 Closes #4344
- ngSwitch: due to 4f32e3ee,
** Directive Priority Changed ** - this commit changes the priority
of ngSwitchWhen
and ngSwitchDefault
from 800
to 1200
. This makes their
priority higher than ngRepeat
, which allows items to be repeated on
the switch case element reliably.
In general your directives should have a lower priority than these directives if you want them to exist inside the case elements. If you relied on the priority of these directives then you should check that your code still operates correctly.
Closes #8235
- $animate:
- $http:
- $location: remove query args when passed in object (2c7d0857, #6565)
- input:
- jqLite:
- ngModel: test & update correct model when running $validate (f3cb2741, #7836, #7837)
- parseKeyValue: ignore properties in prototype chain (cb42766a, #8070, #8068)
- select: auto-select new option that is marked as selected (b8ae73e1, #6828)
- $animate: allow directives to cancel animation events (ca752790, #7722)
- $controller: disable using global controller constructors (3f2232b5)
- FormController: add
$rollbackViewValue
to rollback all controls (85b77314, #7595) - input: support constant expressions for ngTrueValue/ngFalseValue (c90cefe1, #8041, #5346, #1199)
- ngAnimate: conditionally allow child animations to run in parallel with parent animations (8252b8be, #7946)
- ngModel: bind to getters/setters (b9fcf017, #768)
- $controller: due to 3f2232b5,
$controller
will no longer look for controllers on window
.
The old behavior of looking on window
for controllers was originally intended
for use in examples, demos, and toy apps. We found that allowing global controller
functions encouraged poor practices, so we resolved to disable this behavior by
default.
To migrate, register your controllers with modules rather than exposing them as globals:
Before:
function MyController() {
// ...
}
After:
angular.module('myApp', []).controller('MyController', [function() {
// ...
}]);
Although it's not recommended, you can re-enable the old behavior like this:
angular.module('myModule').config(['$controllerProvider', function($controllerProvider) {
// this option might be handy for migrating old apps, but please don't use it
// in new ones!
$controllerProvider.allowGlobals();
}]);
- input: due to c90cefe1,
Previously, these attributes would always be treated as strings. However, they are now parsed as expressions, and will throw if an expression is non-constant.
To convert non-constant strings into constant expressions, simply wrap them in an extra pair of quotes, like so:
<input type="checkbox" ng-model="..." ng-true-value="'truthyValue'">
Closes #8041 Closes #5346 Closes #1199
- $http:
- $location: remove query args when passed in object (a26acb64, #6565)
- input:
- parseKeyValue: ignore properties in prototype chain (873acf8f, #8070, #8068)
- ngAnimate: conditionally allow child animations to run in parallel with parent animations (931789ec, #7946)
This release contains security fixes for $parse that prevent arbitrary code execution via Angular expressions under some very specific conditions. The only applications affected by these vulnerabilities are those that match all of the following conditions:
- application mixes server-side and client-side templating
- the server-side templating contains XSS vulnerabilities
- the vulnerabilities in the server-side templating are being guarded by server-side XSS filters or on the client-side via CSP
- the server-side XSS vulnerabilities can be used to augment the client-side template processed by Angular
Applications not meeting all of the conditions are not vulnerable.
This fix is in both 1.3.0-beta.14 and 1.2.19 release.
The Angular team would like to thank Jann Horn for reporting these vulnerabilities via [security@angularjs.org].
- $compile: bind ng-attr-* even if unbound attribute follows ng-attr-* (8b0258d8, #7739)
- $http:
- $injector: check if a fn is an array explicitly (b1a6baac, #7904, #2653)
- $interval: when canceling, use clearInterval from $window instead of global scope. (a4904c0f)
- $parse:
- prevent invocation of Function's bind, call and apply (77ada4c8)
- forbid proto properties in angular expressions (6081f207)
- forbid {define,lookup}{Getter,Setter} properties (48fa3aad)
- forbid referencing Object in angular expressions (528be29d)
- handle constants as one-time binding expressions (d9763f1b, #7970)
- $timeout/$interval: if invokeApply is false, do not use evalAsync (19b6b343, #7999, #7103)
- Angular: nodeName should always be lowercase (dafb8a3c, #3987)
- Angular.copy: preserve prototype chain when copying objects (b59b04f9, #5063, #3767, #4996)
- core: drop the toBoolean function (bdfc9c02, #3969, #4277, #7960)
- injector: allow multiple loading of function modules (2f0a4488, #7255)
- input:
- jqLite:
- numberFilter: correctly round fractions despite floating-point arithmetics issues in JS (189cd064, #7870, #7878)
- testabilityPatch: fix invocations of angular.mock.dump (e8e07502)
- forEach: use native for loop instead of forEach for Arrays (36625de0)
- $parse:
- due to 77ada4c8,
You can no longer invoke .bind, .call or .apply on a function in angular expressions. This is to disallow changing the behaviour of existing functions in an unforseen fashion.
- due to 6081f207,
The (deprecated) proto propery does not work inside angular expressions anymore.
- due to 48fa3aad,
This prevents the use of {define,lookup}{Getter,Setter} inside angular expressions. If you really need them for some reason, please wrap/bind them to make them less dangerous, then make them available through the scope object.
- due to 528be29d,
This prevents the use of Object
inside angular expressions.
If you need Object.keys, make it accessible in the scope.
- Angular.copy: due to b59b04f9,
This changes angular.copy
so that it applies the prototype of the original
object to the copied object. Previously, angular.copy
would copy properties
of the original object's prototype chain directly onto the copied object.
This means that if you iterate over only the copied object's hasOwnProperty
properties, it will no longer contain the properties from the prototype.
This is actually much more reasonable behaviour and it is unlikely that
applications are actually relying on this.
If this behaviour is relied upon, in an app, then one should simply iterate
over all the properties on the object (and its inherited properties) and
not filter them with hasOwnProperty
.
Be aware that this change also uses a feature that is not compatible with
IE8. If you need this to work on IE8 then you would need to provide a polyfill
for Object.create
and Object.getPrototypeOf
.
- core: due to bdfc9c02, values 'f', '0', 'false', 'no', 'n', '[]' are no longer treated as falsy. Only JavaScript falsy values are now treated as falsy by the expression parser; there are six of them: false, null, undefined, NaN, 0 and "".
Closes #3969 Closes #4277 Closes #7960
- $timeout/$interval:
- due to 19b6b343
Previously, even if invokeApply was set to false, a $rootScope digest would occur during promise
resolution. This is no longer the case, as promises returned from $timeout and $interval will no
longer trigger $evalAsync (which in turn causes a $digest) if invokeApply
is false.
Workarounds include manually triggering $scope.$apply(), or returning $q.defer().promise from a promise callback, and resolving or rejecting it when appropriate.
var interval = $interval(function() {
if (someRequirementFulfilled) {
$interval.cancel(interval);
$scope.$apply();
}
}, 100, 0, false);
or:
var interval = $interval(function (idx) {
// make the magic happen
}, 1000, 10, false);
interval.then(function(idx) {
var deferred = $q.defer();
// do the asynchronous magic --- $evalAsync will cause a digest and cause
// bindings to update.
return deferred.promise;
});
- $compile: bind ng-attr-* even if unbound attribute follows ng-attr-* (ed59370d)
- $http: should not read statusText on IE<10 when request is aborted (0c80df21)
- $injector: check if a fn is an array explicitly (67c11b9a, #7904, #2653)
- $interval: when canceling, use clearInterval from $window instead of global scope. (f780ccfa)
- $parse:
- make the window check in ensureSafeObject IE8 friendly (ba62e975)
- prevent invocation of Function's bind, call and apply (07fa87a8)
- forbid proto properties in angular expressions (cb713e60)
- forbid {define,lookup}{Getter,Setter} properties (89ca8597)
- forbid referencing Object in angular expressions (bc6fb7cc)
- injector: allow multiple loading of function modules (d71f16e7, #7255)
- input:
- jqLite: change expando property to a more unique name (74e1cc68)
- numberFilter: correctly round fractions despite floating-point arithmetics issues in JS (e5f454c8, #7870, #7878)
- testabilityPatch: fix invocations of angular.mock.dump (5e944a1c)
- jqLite: don't use reflection to access expandoId (a4faa5cd)
- $parse:
- due to 07fa87a8,
You can no longer invoke .bind, .call or .apply on a function in angular expressions. This is to disallow changing the behaviour of existing functions in an unforseen fashion.
- due to cb713e60,
The (deprecated) proto propery does not work inside angular expressions anymore.
- due to 89ca8597,
This prevents the use of {define,lookup}{Getter,Setter} inside angular expressions. If you really need them for some reason, please wrap/bind them to make them less dangerous, then make them available through the scope object.
- due to bc6fb7cc,
This prevents the use of Object
inside angular expressions.
If you need Object.keys, make it accessible in the scope.
- jqLite: change expando property to a more unique name (20c3c9e2)
- $compile:
- $injector: report circularity in circular dependency error message (545d22b4, #7500)
- $parse: Handle one-time to
null
(600a41a7, #7743, #7787) - NgModel:
- ensure pattern and ngPattern use the same validator (1be9bb9d)
- make ngMinlength and ngMaxlength as standalone directives (26d91b65, #6750)
- make sure the ngMinlength and ngMaxlength validators use the $validators pipeline (5b8e7ecf, #6304)
- make sure the pattern validator uses the $validators pipeline (e63d4253)
- make sure the required validator uses the $validators pipeline (e53554a0, #5164)
- jqLite: data should store data only on Element and Document nodes (a196c8bc)
- ngResource: don't convert literal values into Resource objects when isArray is true (16dfcb61, #6314, #7741)
- NgModel: introduce the $validators pipeline (a8c7cb81)
- attrs: trigger observers for specific ng-attributes (d9b90d7c, #7758)
- input: add $touched and $untouched states (adcc5a00)
- ngInclude: emit $includeContentError when HTTP request fails (e4419daf, #5803)
- $compile: move ng-binding class stamping for interpolation into compile phase (35358fdd)
- $http: move xsrf cookie check to after cache check in $http (dd1d189e, #7717)
- Scope: change Scope#id to be a simple number (8c6a8171)
- forEach: cache array length (55991e33)
- isArray: use native Array.isArray (751ebc17, #7735)
- isWindow optimize internal isWindow call (b68ac4cb)
- jqLite:
- ngBind: set the ng-binding class during compilation instead of linking (fd5f3896)
- shallowCopy: use Object.keys to improve performance (04468db4)
- $compile: due to 2cde927e,
Requesting isolate scope and any other scope on a single element is an error. Before this change, the compiler let two directives request a child scope and an isolate scope if the compiler applied them in the order of non-isolate scope directive followed by isolate scope directive.
Now the compiler will error regardless of the order.
If you find that your code is now throwing a $compile:multidir
error,
check that you do not have directives on the same element that are trying
to request both an isolate and a non-isolate scope and fix your code.
Closes #4402 Closes #4421
- NgModel: due to 1be9bb9d,
If an expression is used on ng-pattern (such as ng-pattern="exp"
) or on the
pattern attribute (something like on pattern="{{ exp }}"
) and the expression
itself evaluates to a string then the validator will not parse the string as a
literal regular expression object (a value like /abc/i
). Instead, the entire
string will be created as the regular expression to test against. This means
that any expression flags will not be placed on the RegExp object. To get around
this limitation, use a regular expression object as the value for the expression.
//before
$scope.exp = '/abc/i';
//after
$scope.exp = /abc/i;
- Scope: due to 8c6a8171, Scope#$id is now of time number rather than string. Since the id is primarily being used for debugging purposes this change should not affect anyone.
- forEach: due to 55991e33, forEach will iterate only over the initial number of items in the array. So if items are added to the array during the iteration, these won't be iterated over during the initial forEach call.
This change also makes our forEach behave more like Array#forEach.
- jqLite: due to a196c8bc, previously it was possible to set jqLite data on Text/Comment nodes, but now that is allowed only on Element and Document nodes just like in jQuery. We don't expect that app code actually depends on this accidental feature.
- $compile:
- ensure transclude works at root of templateUrl (fd420c40, #7183, #7772)
- bound transclusion to correct scope (1382d4e8)
- don't pass transcludes to non-transclude templateUrl directives (b9ddef2a)
- don't pass transclude to template of non-transclude directive (eafba9e2)
- fix nested isolated transclude directives (bb931097, #1809, #7499)
- pass transcludeFn down to nested transclude directives (8df5f325, #7240, #7387)
- $injector: report circularity in circular dependency error message (14e797c1, #7500)
- ngResource: don't convert literal values into Resource objects when isArray is true (f0904cf1, #6314, #7741)
- $compile: move ng-binding class stamping for interpolation into compile phase (81b7e5ab)
- $http: move xsrf cookie check to after cache check in $http (8b86d363, #7717)
- isArray: use native Array.isArray (6c14fb1e)
- jqLite: cache collection length for all methods that work on a single element (6d418ef5)
- ngBind: set the ng-binding class during compilation instead of linking (1b189027)
- $animate:
- $compile:
- do not merge attrs that are the same for replace directives (b635903e, #7463)
- pass
transcludeFn
down to nested transclude directives (11385060, #7240, #7387) - set
$isolateScope
correctly for sync template directives (5319621a, #6942) - reference correct directive name in
ctreq
error (6bea0591, #7062, #7067) - fix regression which affected old jQuery releases (a97a172e)
- $httpBackend: don't error when JSONP callback is called with no parameter (a7ccb753, #7031)
- $location:
- angular.copy: support circular references in the value being copied (5c997209, #7618)
- grunt-utils: ensure special inline CSS works when
angular
is not a global (d4231171, #7176) - input:
- jqLite: use jQuery only if
jQuery.fn.on
is present (fafcd628) - limitTo: do not convert
Infinity
toNaN
(fcdac65a, #6771, #7118) - ngAnimate:
$animate
methods should accept native DOM elements (9227a5db) - ngClass:
- ngLocale: fix i18n code-generation to support
get_vf_
,decimals_
, andget_wt_
(96a31476) - ngSanitize: encode surrogate pair properly (3d0b49c0, #5088, #6911)
- ngSwitch: properly support case labels with different numbers of transclude fns (32aa4915)
- numberFilter: fix rounding error edge case (0388eed7, #7453, #7478)
- $interpolate: optimize value stringification (9d4fa33e, #7501)
- scope: 10x. Share the child scope class. (9ab9bf6b)
- $animate:
- $parse: mark constant unary minus expressions as constant (6e420ff2, #6932)
- Scope:
- filter.ngdoc: Check if "input" variable is defined (a275d539, #6819)
- input: don't perform HTML5 validation on updated model-value (b2363e31, #6796, #6806)
- ngClass: handle ngClassOdd/Even affecting the same classes (55fe6d63, #5271)
- $$RAFProvider: check for webkitCancelRequestAnimationFrame (e84da228, #6526)
- $$rAF: always fallback to a $timeout incase native rAF isn't supported (ee8e4a94, #6654)
- $compile: support templates with thead and tfoot root elements (ca0ac649, #6289)
- $http:
- $rootScope:
- angular.bootstrap: only allow angular to load once (0d60f8d3, #5863, #5587)
- jqLite: traverse
host
property for DocumentFragment in inheritedData() (98d825e1, #6637) - ngAnimate: setting classNameFilter disables animation inside ng-if (a41a2a1d, #6539)
- ngCookie: convert non-string values to string (93d1c95c, #6151, #6220)
- ngTouch: update workaround for desktop Webkit quirk (01a34f51, #6302)
- orderBy: support string predicates containing non-ident characters (10d3e1e4, #6143, #6144)
- select: avoid checking option element selected properties in render (dc149de9, #2448, #5994, #6769)
- $animate:
- delegate down to addClass/removeClass if setClass is not found (18c41af0, #6463)
- ensure all comment nodes are removed during a leave animation (f4f1f43d, #6403)
- only block keyframes if a stagger is set to occur (e71e7b6c, #4225)
- ensure that animateable directives cancel expired leave animations (e9881991, #5886)
- ensure all animated elements are taken care of during the closing timeout (99720fb5, #6395)
- fix for TypeError Cannot call method 'querySelectorAll' in cancelChildAnimations (c914cd99, #6205)
- $http:
- $parse: reduce false-positives in isElement tests (5fe1f39f, #4805, #5675)
- input: use ValidityState to determine validity (c2d447e3, #4293, #2144, #4857, #5120, #4945, #5500, #5944)
- isElement: reduce false-positives in isElement tests (75515852)
- jqLite:
- numberFilter: convert all non-finite/non-numbers/non-numeric strings to the empty string (cceb455f, #6188, #6261)
- $parse: support trailing commas in object & array literals (6b049c74)
- ngHref: bind ng-href to xlink:href for SVGAElement (2bce71e9, #5904)
- $animate: use rAF instead of timeouts to issue animation callbacks (4c4537e6)
- $cacheFactory: skip LRU bookkeeping for caches with unbound capacity (a4078fca, #6193, #6226)
-
$animate:
-
due to 4f84f6b3, ngClass and {{ class }} will now call the
setClass
animation callback instead of addClass / removeClass when both a addClass/removeClass operation is being executed on the element during the animation.Please include the setClass animation callback as well as addClass and removeClass within your JS animations to work with ngClass and {{ class }} directives.
-
due to cf5e463a, Both the
$animate:before
and$animate:after
DOM events must be now registered prior to the $animate operation taking place. The$animate:close
event can be registered anytime afterwards.DOM callbacks used to fired for each and every animation operation that occurs within the $animate service provided in the ngAnimate module. This may end up slowing down an application if 100s of elements are being inserted into the page. Therefore after this change callbacks are only fired if registered on the element being animated.
-
-
input:
-
due to a9fcb0d0, input[type=file] will no longer support ngModel. Due to browser support being spotty among target browsers, file inputs cannot be cleanly supported, and even features which technically do work (such as ng-change) work in an inconsistent way depending on the attributes of the form control.
As a workaround, one can manually listen for change events on file inputs and handle them manually.
-
- $compile: retain CSS classes added in cloneAttachFn on asynchronous directives (5ed721b9, #5439, #5617)
- $http:
- $locale: minor grammar amends for the locale
locale_lt
(95be253f, #6164) - $q: make $q.reject support
finally
andcatch
(074b0675, #6048, #6076) - docs: clarify doc for "args" in $broadcast and $emit (caed2dfe, #6047)
- filterFilter: don't interpret dots in predicate object fields as paths (339a1658, #6005, #6009)
- http: make jshint happy (6609e3da)
- jqLite: trim HTML string in jqLite constructor (36d37c0e, #6053)
- mocks:
- rename mock.animate to ngAnimateMock and ensure it contains all test helper code for ngAnimate (4224cd51, #5822, #5917)
- remove usage of $animate.flushNext in favour of queing (906fdad0)
- always call functions injected with
inject
withthis
set to the current spec (3bf43903, #6102) - refactor currentSpec to work w/ Jasmine 2 (95f0bf9b, #5662)
- ngMock: return false from mock $interval.cancel() when no argument is supplied (dd24c783, #6103)
- ngResource:
The animation mock module has been renamed from mock.animate
to ngAnimateMock
. In addition to the rename, animations will not block within test code even when ngAnimateMock is used. However, all function calls to $animate will be recorded into $animate.queue
and are available within test code to assert animation calls. In addition, $animate.triggerReflow()
is now only available when ngAnimateMock
is used.
- $compile: retain CSS classes added in cloneAttachFn on asynchronous directives (5ed721b9, #5439, #5617)
- $http: update httpBackend to use ActiveXObject on IE8 if necessary (ef210e5e, #5677, #5679)
- $q: make $q.reject support
finally
andcatch
(074b0675, #6048, #6076) - filterFilter: don't interpret dots in predicate object fields as paths (339a1658, #6005, #6009)
- mocks: refactor currentSpec to work w/ Jasmine 2 (95f0bf9b, #5662)
- ngResource: don't append number to '$' in url param value when encoding URI (ce1f1f97, #6003, #6004)
- $parse: do not use locals to resolve object properties (f09b6aa5, #5838, #5862)
- a: don't call preventDefault on click when a SVGAElement has an xlink:href attribute (e0209169, #5896, #5897)
- input: use Chromium's email validation regexp (79e519fe, #5899, #5924)
- ngRoute: pipe preceding route param no longer masks ? or * operator (fd6bac7d, #5920)
- $animate:
- ensure the final closing timeout respects staggering animations (ed53100a)
- prevent race conditions for class-based animations when animating on the same CSS class (4aa9df7a, #5588)
- correctly detect and handle CSS transition changes during class addition and removal (7d5d62da)
- avoid accidentally matching substrings when resolving the presence of className tokens (524650a4)
- $http: ensure default headers PUT and POST are different objects (e1cfb195, #5742, #5747, #5764)
- $rootScope: prevent infinite $digest by checking if asyncQueue is empty when decrementing ttl (2cd09c9f, #2622)
- $animate:
-
$http: due to e1cfb195, it is now necessary to separately specify default HTTP headers for PUT, POST and PATCH requests, as these no longer share a single object.
To migrate your code, follow the example below:
Before:
// Will apply to POST, PUT and PATCH methods $httpProvider.defaults.headers.post = { "X-MY-CSRF-HEADER": "..." };
After:
// POST, PUT and PATCH default headers must be specified separately, // as they do not share data. $httpProvider.defaults.headers.post = $httpProvider.defaults.headers.put = $httpProviders.defaults.headers.patch = { "X-MY-CSRF-HEADER": "..." };
- $http:
- $location: return '/' for root path in hashbang mode (63cd873f, #5650, #5712)
- $parse: fix CSP nested property evaluation, and issue that prevented its tests from failing (3b1a4fe0, #5591, #5592)
- closure: add Closure externs for angular.$q.Promise.finally (caeb7402, #4757)
- ngMock window.inject: Remove Error 'stack' property changes (7e916455)
- $animate:
- $http: (3d38fff8)
- $injector: remove the
INSTANTIATING
flag properly when done (186a5912, #4361, #5577) - $location:
- $resource: prevent URL template from collapsing into an empty string (131e4014, #5455, #5493)
- $sanitize: consider the
size
attribute as a valid/allowed attribute (056c8493, #5522) - Scope: don't let watch deregistration mess up the dirty-checking digest loop (884ef0db, #5525)
- input:
- ngRepeat: allow for more flexible coding style in ngRepeat expression (c9705b75, #5537, #5598)
- ngRoute: instantiate controller when template is empty (498365f2, #5550)
- ngShow/ngHide, ngIf: functions with zero args should be truthy (01c5be46, #5414)
- Scope: limit propagation of $broadcast to scopes that have listeners for the event (80e7a455, #5341, #5371)
- $animate: use a scheduled timeout in favor of a fallback property to close transitions (54637a33, #5255, #5241, #5405)
- $compile: remove invalid IE exceptional case for
href
(c7a1d1ab, #5479) - $location: parse xlink:href for SVGAElements (bc3ff2ce, #5472, #5198, #5199, #4098, #1420)
- $log: should work in IE8 (4f5758e6, #5400)
- $parse: return
undefined
if an intermetiate property's value isnull
(26d43cac, #5480) - closure: add type definition for
Scope#$watchCollection
(8f329ffb, #5475) - forEach: allow looping over result of
querySelectorAll
in IE8 (274a6734) - input: do not hold input for composition on Android (3dc18037, #5308)
- jqLite: support unbind self within handler (2f91cfd0)
- ngRepeat: allow multiline expressions (cbb3ce2c, #5000)
- select: invalidate when
multiple
,required
, and model is[]
(5c97731a, #5337)
- jqLite: provide support for
element.one()
(937caab6) - ngAnimate: provide configuration support to match specific className values to trigger animations (cef084ad, #5357, #5283)
- compile: add class 'ng-scope' before cloning and other micro-optimizations (f3a796e5, #5471)
- $parse: use a faster path when the number of path parts is low (f4462319)
- use faster check for
$$
prefix (06c5cfc7)
- $compile: allow literals in isolate scope references (43072e38, #5296)
- angular-mocks: use copy of mock data in $httpBackend (f69dc162)
- closure: add missing FormController extern definitions (1d5e18b0, #5303)
- ngInclude: add template to DOM before linking other directives (30a8b7d0, #5247)
- ngView: add template to DOM before linking other directives (f8944efe)
- $injector: remove invoke optimization that doesn't work (05e4fd34, #5388)
- $resource: use shallow copy instead of angular.copy (fcd2a813, #5300)
- a: do not link when href or name exists in template (f3de5b6e, #5362)
- jqLite: implement and use the
empty
method in place ofhtml(‘’)
(3410f65e, #4457)
- angular-mocks: due to f69dc162,
some tests that rely on identity comparison rather than equality comparison in checking mock http responses will be broken,
since now each mock response is a copy of the original response. This is usually fixable by changing a
.toBe()
comparison totoEqual()
inside of tests.
- $animate:
- $compile:
- $rootScope:
- $sanitize: don't rely on YARR regex engine executing immediately in order to prevent object mutation (81b81856, #5193, #5192)
- closure: closure compiler shouldn't rename .defaults.transformRequest (f01087f8)
- input: ensure ngModelWatch() triggers second digest pass when appropriate (b6d54393, #5258, #5282)
- isElement: return boolean value rather than
truthy
value. (2dbb6f9a, #4519, #4534) - jqLite: ignore incompatible nodes on find() (1169b544, #4120)
- ngInit: evaluate ngInit before ngInclude (0e50810c, #5167, #5208)
- ngSanitize: prefer textContent to innerText to avoid layout trashing (bf1972dc)
- $parse: micro-optimization for ensureSafeObject function (689dfb16, #5246)
- Scope: short-circuit after dirty-checking last dirty watcher (d070450c, #5272, #5287)
- $animate:
- ensure blocked keyframe animations are unblocked before the DOM operation (2efe8230, #5106)
- ensure animations are disabled during bootstrap to prevent unwanted structural animations (eed23332, #5130)
- $sanitize: use the same whitelist mechanism as
$compile
does (33352348, #3748) - input: react to form auto completion, through the
change
event, on modern browsers (a090400f, #1460) - $attrs: add
$attrs.$attr
to externs so that it isn't renamed on js minification (bcca8054)
No new features in this release
There are no breaking changes in this release (promise!)
- $animate:
- ensure keyframe animations are blocked around the reflow (6760d7a3, #5018)
- ensure transition animations are unblocked before the dom operation occurs (062fbed8, #5014, #4265)
- ensure addClass/removeClass animations do not snap during reflow (76e4db6f, #4892)
- ensure the DOM operation isn't run twice (7067a8fb, #4949)
- $compile:
- $httpBackend: only IE8 and below can't use
script.onload
for JSONP (a3172a28, #4523, #4527, #4922) - $parse: allow for new lines in expr when promise unwrapping is on (40647b17, #4718)
- $resource: Always return a resource instance when calling class methods on resources. (f6ecf9a3, #4545, #5061)
- httpBackend: should not read response data when request is aborted (6f1050df, #4913, #4940)
- loader: expose
$$minErr
to modules such asngResource
(9e89a31b, #5050) - ngAnimate:
- ngClass: ensure that ngClass only adds/removes the changed classes (6b8bbe4d, #4960, #4944)
- ngController: fix issue with ngInclude on the same element (6288cf5c, #4431)
- ngInclude:
- ngMock: fixes httpBackend expectation with body object (4d16472b, #4956)
- ngView: Don't throw when the ngView element contains content with directives. (e6521e74, #5069)
- tests: Correct tests for IE11 (57924234, #5046)
- input: hold listener during text composition (a4e6d962, #4684)
- $compile:
- $resource: don't use $parse for @dotted.member (9577702e)
- bootstrap: make IE8 happy (a61b65d0)
- loader: don't rely on internal APIs (8425e9fe, #4437, #4874)
- minErr: remove references to internal APIs (94764ee0)
- ngIf: don't create multiple elements when changing from a truthy value to another thruthy value (4612705e, #4852)
- urlUtils:
- animations:
- $parse: secure expressions by hiding "private" properties (3d6a89e8)
- docs:
- jqLite: expose isolateScope() getter similar to scope() (27e9340b)
- misc: add externs file for Closure Compiler (9d0a6977)
-
$animate:
- don't force animations to be enabled (98adc9e0)
- only apply the fallback property if any transition animations are detected (94700807)
- avoid hanging animations if the active CSS transition class is missing (b89584db, #4732, #4490)
- ensure staggering animations understand multiple delay values (41a2d5b3)
- ensure the active class is not applied if cancelled during reflow (e53ff431, #4699)
- use direct DOM comparison when checking for $rootElement (d434eabe, #4679)
- ensure former nodes are fully cleaned up when a follow-up structural animation takes place (7f0767ac, #4435)
- ensure enable/disable animations work when the document node is used (6818542c, #4669)
- skip unnecessary addClass/removeClass animations (76b628bc, #4401, #2332)
- ensure animations work properly when the $rootElement is being animated (2623de14, #4397, #4231)
- only cancel class-based animations if the follow-up class contains CSS transition/keyframe animation code (f5289fe8, #4463, #3784)
-
$compile:
- don't leak isolate scope state when replaced directive is used multiple times (b5af198f)
- correct isolate scope distribution to controllers (3fe4491a)
- replaced element has isolate scope (97c7a4e3)
- only pass isolate scope to children that belong to the isolate directive (d0efd5ee)
- make isolate scope truly isolate (909cabd3, #1924, #2500)
- don't instantiate controllers twice for element transclude directives (18ae985c, #4654)
- attribute bindings should not break due to terminal directives (79223eae, #4525, #4528, #4649)
- instantiate controlers when re-entering compilation (faf5b980, #4434, #4616)
- $injector: allow a constructor function to return a function (c22adbf1)
- $parse: check function call context to be safe (6d324c76, #4417)
- angular-mocks: add inline dependency annotation (6d23591c, #4448)
- animateSpec: run digest to enable animations before tests (aea76f0d)
-
bootstrap-prettify: share
$postDigestQueue with demo apps (1df3da36) - csp:
- docModuleComponents: implement anchor scroll when content added (eb51b024, #4703)
- input: keep track of min/max attars on-the-fly (4b653aea)
- ngAnimate: fix cancelChildAnimations throwing exception (b9557b0a, #4548)
- ngClassSpec: clear animation enable fn from postDigestQueue (ffa9d0a6)
- ngEventDirectives: parse expression only once during compile phase. (9a828738)
- ngIf:
- ngInclude: only run anchorScroll after animation is done (d378f550, #4723)
- ngMock: throw more descriptive errors for $animate.flushNext() (6fb19157)
- ngModel: deregister from the form on scope not DOM destruction (8f989d65, #4226, #4779)
- ngScenario: correctly disable animations for end 2 end tests (9d004585)
- ngView:
- ngdocs:
-
$compile:
-
due to d0efd5ee, Child elements that are defined either in the application template or in some other directives template do not get the isolate scope. In theory, nobody should rely on this behavior, as it is very rare - in most cases the isolate directive has a template.
-
due to 909cabd3, Directives without isolate scope do not get the isolate scope from an isolate directive on the same element. If your code depends on this behavior (non-isolate directive needs to access state from within the isolate scope), change the isolate directive to use scope locals to pass these explicitly.
Before
<input ng-model="$parent.value" ng-isolate> .directive('ngIsolate', function() { return { scope: {}, template: '{{value}}' }; });
After
<input ng-model="value" ng-isolate> .directive('ngIsolate', function() { return { scope: {value: '=ngModel'}, template: '{{value}} }; });
- due to 79223eae,
Previously, the interpolation priority was
-100
in 1.2.0-rc.2, and100
before 1.2.0-rc.2. Before this change the binding was setup in the post-linking phase.Now the attribute interpolation (binding) executes as a directive with priority 100 and the binding is set up in the pre-linking phase.
-
-
$parse: due to 3d6a89e8,
This commit introduces the notion of "private" properties (properties whose names begin and/or end with an underscore) on the scope chain. These properties will not be available to Angular expressions (i.e. {{ }} interpolation in templates and strings passed to
$parse
) They are freely available to JavaScript code (as before).Motivation
Angular expressions execute in a limited context. They do not have direct access to the global scope,
window
,document
or the Function constructor. However, they have direct access to names/properties on the scope chain. It has been a long standing best practice to keep sensitive APIs outside of the scope chain (in a closure or your controller.) That's easier said that done for two reasons:- JavaScript does not have a notion of private properties so if you need someone on the scope chain for JavaScript use, you also expose it to Angular expressions
- the new "controller as" syntax that's now in increased usage exposes the entire controller on the scope chain greatly increaing the exposed surface.
Though Angular expressions are written and controlled by the developer, they:
- Typically deal with user input
- Don't get the kind of test coverage that JavaScript code would
This commit provides a way, via a naming convention, to allow publishing/restricting properties from controllers/scopes to Angular expressions enabling one to only expose those properties that are actually needed by the expressions.
-
csp: due to 08f376f2, triggering ngCsp directive via
ng:csp
attribute is not supported any more. Please usedata-ng-csp
instead. -
jqLite: due to 27e9340b,
jqLite.scope()
(connonly used throughangular.element(node).scope()
) does not return the isolate scope on the element that triggered directive with isolate scope. UsejqLite.isolateScope()
instead.
-
$interval: add a service wrapping setInterval (2b5ce84f)
-
$sce: simpler patterns for
$sceDelegateProviders
white/blacklists (93ce5923, #4006) -
$filter: allow map of filters to be registered (4033cf28, #4036, #4091)
-
$compile: support
tel:
links ina[href]
(e7730297) -
Directives:
-
Misc:
-
$compile:
- abort compilation when duplicate element transclusion (63c5334c, #3893, #4217, #3307)
- make order directives w/ same priority deterministic (4357da85)
- fix (reverse) directive postLink fn execution order (31f190d4, #3558)
- don't terminate compilation for regular transclusion directives (fe214501)
- ng-attr to support dash separated attribute names (8e6e3eba)
- allow interpolations for non-event handlers attrs (8e1276c0)
- link parents before traversing (742271ff, #3792, #3923, #3935, #3927)
- collect ranges on multiple directives on one element (6a8edc1d, #4002)
-
$parse:
-
$httpBackend:
-
$location:
-
$log: prevent logging
undefined
for $log in IE (4ff1a650, #1705) -
Scope:
-
Filters:
- date: allow negative millisecond value strings (025c9219)
-
Directives:
- correct priority of structural directives (ngRepeat, ngSwitchWhen, ngIf, ngInclude, ngView) (b7af76b4)
-
input:
false
is no longer an empty value by default (b56b21a8, #3490) - ngBindHtml: watch string value instead of wrapper (e2068ad4, #3932)
- ngOptions: ignore object properties which start with $ (aa3c54c7)
- ngRepeat: correctly track elements even when the collection is initially undefined (31c56f54, #4145, #3964)
- ngTransclude: detect ngTranslude usage without a transclusion directive (5a1a6b86, #3759)
-
jqLite:
-
Misc:
-
ngRoute:
-
ngResource:
-
ngSanitize:
-
ngTouch:
-
ngAnimate:
- ensure that a timeStamp is created if not provided by the browser event (cd216c4c, #3053)
- perform internal caching on getComputedStyle to boost the performance of CSS3 transitions/animations (b1e604e3, #4011, #4124)
- ensure structural animations skip all child animations even if no animation is present during compile (cc584607, #3215)
- cancel any ongoing child animations during move and leave animations (3f31a7c7)
- ensure elapsedTime always considers delay values (079dd939)
- ensure transition-property is not changed when only keyframe animations are in use (2df3c9f5, #3933)
- avoid completing the animation asynchronously unless CSS transtiions/animations are present (2a63dfa6, #4023, #3940)
- ensure that delays are always considered before an animation closes (0a63adce, #4028)
- check elapsedTime on current event (d50ed6bf)
- support addClass/removeClass animations on SVG nodes (c785267e, #3858)
-
ngScenario:
-
$compile: due to 31f190d4, the order of postLink fn is now mirror opposite of the order in which corresponding preLinking and compile functions execute.
Previously the compile/link fns executed in this order controlled via priority:
- CompilePriorityHigh, CompilePriorityMedium, CompilePriorityLow
- compile child nodes
- PreLinkPriorityHigh, PreLinkPriorityMedium, PreLinkPriorityLow
- link child nodes
- PostLinkPriorityHigh, PostLinkPriorityMedium, PostLinkPriorityLow
This was changed to:
- CompilePriorityHigh, CompilePriorityMedium, CompilePriorityLow
- compile child nodes
- PreLinkPriorityHigh, PreLinkPriorityMedium, PreLinkPriorityLow
- link child nodes
- PostLinkPriorityLow, PostLinkPriorityMedium , PostLinkPriorityHigh
Very few directives in practice rely on order of postLinking function (unlike on the order of compile functions), so in the rare case of this change affecting an existing directive, it might be necessary to convert it to a preLinking function or give it negative priority (look at the diff of this commit to see how an internal attribute interpolation directive was adjusted).
-
$parse:
- due to 5dc35b52,
$parse and templates in general will no longer automatically unwrap promises. This feature has been deprecated and if absolutely needed, it can be reenabled during transitional period via
$parseProvider.unwrapPromises(true)
api. - due to b6a37d11, feature added in rc.2 that unwraps return values from functions if the values are promises (if promise unwrapping is enabled - see previous point), was reverted due to breaking a popular usage pattern.
- due to 5dc35b52,
$parse and templates in general will no longer automatically unwrap promises. This feature has been deprecated and if absolutely needed, it can be reenabled during transitional period via
-
directives: due to b7af76b4, the priority of ngRepeat, ngSwitchWhen, ngIf, ngInclude and ngView has changed. This could affect directives that explicitly specify their priority.
In order to make ngRepeat, ngSwitchWhen, ngIf, ngInclude and ngView work together in all common scenarios their directives are being adjusted to achieve the following precendence:
Directive | Old Priority | New Priority ============================================= ngRepeat | 1000 | 1000 --------------------------------------------- ngSwitchWhen | 500 | 800 --------------------------------------------- ngIf | 1000 | 600 --------------------------------------------- ngInclude/ngView | 1000 | 400
-
form/ngForm due to 7a586e5c, Inputs with name equal to "hasOwnProperty" are not allowed inside form or ngForm directives.
Before, inputs whose name was "hasOwnProperty" were quietly ignored and not added to the scope. Now a badname exception is thrown.
Using "hasOwnProperty" for an input name would be very unusual and bad practice.
Either do not include such an input in a
form
orngForm
directive or change the name of the input. -
ngScenario: due to 28f56a38, browserTrigger now uses an eventData object instead of direct parameters for mouse events. To migrate, place the
keys
,x
andy
parameters inside of an object and place that as the third parameter for the browserTrigger function.
-
Scope: asynchronously auto-flush
$evalAsync
queue when outside of$digest
cycle (6b91aa0a, #3539, #2438) - minErr: log minerr doc url in development builds (37123cd2, #3566)
- ngMock:
-
$injector: don't parse fns with no args (44b6b72e)
-
$parse: handle promises returned from parsed function calls (3a658220, #3503)
-
$q:
-
$location: fix history problems on Boxee box (eefcdad0)
-
$timeout: clean deferreds immediately after callback exec/cancel (920a3804)
-
Directives:
-
Filters:
-
Misc:
-
i18n: remove obsolete locale files (6382e21f)
-
ngAnimate:
- ensure that
ngClass
is always compiled before enter, leave and move animations are applied (36ad40b1, #3727, #3603) - cut down on extra
$timeout
calls (4382df03) - skip
ngAnimate
animations if the provided element already has transitions applied to it (7c605ddf, #3587) - only apply a timeout when transitions or keyframe animations are used (ee2f3d21, #3613)
- ensure older versions of webkit work for animations (b1a43cd0)
- ensure that
-
ngMocks:
$logProvider
should not use internal APIs (baaa73ee, #3612)
- i18n: due to 6382e21f, some uncommon region-specific local files were removed.
Contains only these fixes cherry-picked from v1.2.0rc1.
-
$compile:
-
$http: ensure case-insensitive header overriding (25d9f5a8)
-
$location:
-
$parse: move global getter out of parse.js (099138fb)
-
$q: call
reject()
even if$exceptionHandler
rethrows (d59027c4) -
$timeout: clean deferreds immediately after callback exec/cancel (ac69392c)
-
$sanitize: match URI schemes case-insensitively (fcd761b9, #3210)
-
Scope: watches can be safely unregistered inside watch handlers (a4ec2979, #2915)
-
ngMock
- $timeout should forward delay argument (a5fb372e)
-
jqLite:
-
Directives:
- form: pick the right attribute name for ngForm (dc1e55ce, #2997)
- input: fix the email regex to accept TLDs up to 6 characters long (ad76e77f)
- ngCloak: hide element even when CSS 'display' is set (06b0930b)
- ngSubmit: expose $event to ngSubmit callback (b0d5f062)
- ngValue: made ngValue to write value attribute to element (3b898664)
-
Filters:
-
i18n: Do not transform arrays into objects (751c77f8)
-
jqLite:
-
Misc:
-
ngAnimate: complete rewrite of animations (81923f1e)
-
$sce: new $sce service for Strict Contextual Escaping and lots of other security enhancements (bea9422e)
-
minErr: add error message minification and better error messages (c8fcf3b3, 09fa0656, b8ea7f6a)
-
$compile:
-
$http: accept function as headers value (a7150f12)
-
$q:
-
$resource:
-
$route: express style route matching (support for optional params and new wildcard syntax) (04cebcc1)
-
jqLite: switch bind/unbind to more recent jQuery on/off (f1b94b4b)
-
Misc:
-
Directives:
-
ngMobile/ngTouch:
-
ngMock:
-
scenario: expose jQuery for usage outside of angular scenario (3fdbe81a)
-
ngDocs:
- provide support for user to jump between different versions of the angularjs doc (46dfb92a)
- add links to source for API (52d6a599)
- support popover, foldouts and foldover annotations (ef229688)
- provide documentation for the new ngRepeat repeater syntax (b3650457)
- provide support for inline variable hinting (21c70729)
-
$compile:
- correct controller instantiation for async directives (c173ca41, #3493, #3482, #3537, #3540)
- always instantiate controllers before pre-link fns run (5c560117, #3493, #3482, #3514)
- always instantiate controllers in parent->child order (45f9f623, #2738)
- don't check attr.specified on non-ie7 (f9ea69f6, #3231, #2160)
- allow
data:
image URIs inimg[src]
bindings (3e39ac7e) - empty normalized href url should pass sanitation check (fc8c9baa, #2219)
- prevent infinite loop w/ replace+transclude directives (69f42b76, #2155)
- reject multi-expression interpolations for
src
attribute (38deedd6) - disallow interpolations for DOM event handlers (39841f2e)
- sanitize values bound to
img[src]
(1adf29af) - support multi-element group over text nodes (b28f9694)
- correct component transclusion on compilation root. (15e1a29c)
-
$http:
-
$location:
-
$parse:
-
$q: call
reject()
even if$exceptionHandler
rethrows (664526d6) -
$resource: check whether response matches action.isArray (a644ca7b, #2255)
-
$sanitize: match URI schemes case-insensitively (7fef06fe, #3210)
-
Scope:
-
jqLite:
- properly detect unsupported calls for on()/off() (3824e400, 4f5dfbc3, #3501)
- return array from multi select in val() (306a6134)
- forgive unregistration of a non-registered handler (ab59cc6c)
- support space-separated events in off (bdd4e982, #3256)
- prepend array in correct order (fd87eb0c)
- allow override of jqLite.triggerHandler event object (0cac8729)
- added optional name arg in removeData (e1a050e6)
- correctly monkey-patch core jQuery methods (da5f537c)
-
i18n: Do not transform arrays into objects (b3d7a038)
-
ngMobile/ngTouch:
-
ngMock:
-
ngScenario: select().option(val) should prefer exact value match (22a9b1ac, #2856)
-
Directives:
-
ngRepeat:
-
ngShowHide: change the .ng-hide CSS class to use an !important flag (246c1439)
-
ngSubmit: expose $event to ngSubmit callback (3371fc25)
-
ngValue: made ngValue to write value attribute to element (09a1e7af)
-
ngView: ensure ngView is terminal and uses its own manual transclusion system (87405e25)
-
ngCloak: hide ngCloak-ed element even when CSS 'display' is set (3ffddad1)
-
input[email]
: fix the email regex to accept TLDs up to 6 characters long (af731354) -
form: pick the right attribute name for ngForm (0fcd1e3b, #2997)
-
select: don't support binding to
select[multiple]
(d87fa004, #3230)
-
-
Filters:
- numberFilter: always convert scientific notation to decimal (a13c01a8)
-
Misc:
- detect transition/animation on older Android browsers (ef5bc6c7)
- handle duplicate params in parseKeyValue/toKeyValue (80739409)
- don't crash on invalid query parameters (8264d080)
- change angular.copy to correctly clone RegExp (f80730f4, #3473, #3474)
- angular.equals now supports for regular expressions (724819e3, #2685)
- angular.equals should not match keys defined in the prototype chain (7829c50f)
- angular.equals should not consider {} and [] to be equivalent (1dcafd18)
- angular.bootstrap should throw an error when bootstrapping a bootstrapped element (3ee744cc)
- angular.toJson should skip JSON.stringify for undefined (5a294c86)
- change css wrapping in grunt to prepend styles to the top of the head tag (fbad068a)
-
ngAnimate: due to 81923f1e, too many things changed, we'll write up a separate doc with migration instructions and will publish it at http://yearofmoo.com. Please check out the ngAnimate module docs and $animate api docs in the meantime.
-
$compile:
-
due to 1adf29af and 3e39ac7e,
img[src]
URLs are now being sanitized and a whitelist configured via$compileProvider
can be used to configure what safe urls look like.By default all common protocol prefixes are whitelisted including
data:
URIs with mime typesimage/*
. Therefore this change is expected to have no impact on apps that don't contain malicious image links. -
due to 38deedd6, binding more than a single expression to
*[src]
or*[ng-src]
with the exception of<a>
and<img>
elements is not supported.Concatenating expressions makes it hard to understand whether some combination of concatenated values are unsafe to use and potentially subject to XSS vulnerabilities. To simplify the task of auditing for XSS issues, we now require that a single expression be used for
*[src/ng-src]
bindings such as bindings foriframe[src]
,object[src]
, etc. (but notimg[src/ng-src]
since that value is sanitized).
This change ensures that the possible pool of values that are used for data-binding is easier to trace down.
To migrate your code, follow the example below:
Before: JS: scope.baseUrl = 'page'; scope.a = 1; scope.b = 2; HTML: <!-- Are a and b properly escaped here? Is baseUrl controlled by user? --> <iframe src="{{baseUrl}}?a={{a}&b={{b}}"> After: JS: var baseUrl = "page"; scope.getIframeSrc = function() { // There are obviously better ways to do this. The // key point is that one will think about this and do // it the right way. var qs = ["a", "b"].map(function(value, name) { return encodeURIComponent(name) + "=" + encodeURIComponent(value); }).join("&"); // baseUrl isn't on scope so it isn't bound to a user // controlled value. return baseUrl + "?" + qs; } HTML: <iframe src="{{getIframeSrc()}}">
-
due to 39841f2e, Interpolations inside DOM event handlers are disallowed.
DOM event handlers execute arbitrary Javascript code. Using an interpolation for such handlers means that the interpolated value is a JS string that is evaluated. Storing or generating such strings is error prone and leads to XSS vulnerabilities. On the other hand,
ngClick
and other Angular specific event handlers evaluate Angular expressions in non-window (Scope) context which makes them much safer.To migrate the code follow the example below:
Before:
JS: scope.foo = 'alert(1)'; HTML: <div onclick="{{foo}}">
After:
JS: scope.foo = function() { alert(1); } HTML: <div ng-click="foo()">
-
due to e46100f7, existing directives with name ending with
"-start"
or"-end"
will stop working.This change was necessary to enable multi-element directives. The best fix is to rename existing directives, so that they don't end with these suffixes.
-
-
$q: due to f078762d, the
always
method is now exposed asfinally
.The reason for this change is to align
$q
with the Q promise library, despite the fact that this makes it a bit more difficult to use with non-ES5 browsers, like IE8.finally
also goes well together withcatch
api that was added to $q recently and is part of the DOM promises standard.To migrate the code follow the example below:
Before:
$http.get('/foo').always(doSomething);
After:
$http.get('/foo').finally(doSomething);
or for IE8 compatible code:
$http.get('/foo')['finally'](doSomething);
-
$resource:
-
due to 05772e15, resource instance does not have a
$then
function anymore. Use the$promise.then
instead.Before:
Resource.query().$then(callback);
After:
Resource.query().$promise.then(callback);
-
due to 05772e15, instance methods return the promise rather than the instance itself.
Before:
resource.$save().chaining = true;
After:
resource.$save(); resource.chaining = true;
-
due to 05772e15, on success, the resource promise is resolved with the resource instance rather than http response object.
Use interceptor api to access the http response object.
Before:
Resource.query().$then(function(response) {...});
After:
var Resource = $resource('/url', {}, { get: { method: 'get', interceptor: { response: function(response) { // expose response return response; } } } });
-
-
$route:
-
due to 04cebcc1, the syntax for named wildcard parameters in routes has changed from
*wildcard
to:wildcard*
To migrate the code, follow the example below. Here,
*highlight
becomes:highlight*
:Before:
$routeProvider.when('/Book1/:book/Chapter/:chapter/*highlight/edit', {controller: noop, templateUrl: 'Chapter.html'});
After:
$routeProvider.when('/Book1/:book/Chapter/:chapter/:highlight*/edit', {controller: noop, templateUrl: 'Chapter.html'});
-
due to 5599b55b, applications that use
$route
will now need to load an angular-route.js file and define a dependency on the ngRoute module.Before:
... <script src="angular.js"></script> ... var myApp = angular.module('myApp', ['someOtherModule']); ...
After:
... <script src="angular.js"></script> <script src="angular-route.js"></script> ... var myApp = angular.module('myApp', ['ngRoute', 'someOtherModule']); ...
-
-
$location: due to 80739409,
$location.search
now supports multiple keys with the same value provided that the values are stored in an array in$location.search
.Before this change:
-
parseKeyValue
only took the last key overwriting all the previous keys; -
toKeyValue
joined the keys together in a comma delimited string.
This was deemed buggy behavior. If your server relied on this behavior then either the server should be fixed, or a simple serialization of the array should be done on the client before passing it to $location.
-
-
ngBindHtml, sce: due to dae69473,
ngHtmlBindUnsafe
has been removed and replaced byngHtmlBind
(which has been moved fromngSanitize
module to the coreng
module).ngBindHtml
providesngHtmlBindUnsafe
like behavior (evaluate an expression and innerHTML the result into the DOM) when bound to the result of$sce.trustAsHtml(string)
. When bound to a plain string, the string is sanitized via$sanitize
before being innerHTML'd. If the$sanitize
service isn't available (ngSanitize
module is not loaded) and the bound expression evaluates to a value that is not trusted an exception is thrown. -
ngForm: due to 8ea802a1,
If you have form names that will evaluate as an expression:
<form name="ctrl.form">
And if you are accessing the form from your controller:
Before:
function($scope) { $scope['ctrl.form'] // form controller instance }
After:
function($scope) { $scope.ctrl.form // form controller instance }
This makes it possible to access a form from a controller using the new "controller as" syntax. Supporting the previous behavior offers no benefit.
-
ngView: due to 7d69d52a, previously ngView only updated its content, after this change ngView will recreate itself every time a new content is included. This ensures that a single rootElement for all the included contents always exists, which makes definition of css styles for animations much easier.
-
ngInclude: due to aa2133ad, previously ngInclude only updated its content, after this change ngInclude will recreate itself every time a new content is included. This ensures that a single rootElement for all the included contents always exists, which makes definition of css styles for animations much easier.
-
select: due to d87fa004, binding to
select[multiple]
directly or via ngMultiple (ng-multiple) directive is not supported. This feature never worked with two-way data-binding, so it's not expected that anybody actually depends on it. -
ngMobile: due to 94ec84e7, since all the code in the ngMobile module is touch related, we are renaming the module to ngTouch.
To migrate, please replace all references to "ngMobile" with "ngTouch" and "angular-mobile.js" to "angular-touch.js".
Note: 1.1.x releases are considered unstable. They pass all tests but we reserve the right to change new features/apis in between minor releases. Check them out and please give us feedback.
Note: This release also contains all bug fixes available in 1.0.7.
-
$animator:
-
$http:
-
$parse: add support for ternary operators to parser (6798fec4)
-
$q: add $q.always() method (6605adf6)
-
$controller: support "Controller as" syntax (cd38cbf9, 400f9360)
-
Directives:
-
Mobile:
-
docs:
-
scenario runner: adds mousedown and mouseup event triggers to scenario (629fb373)
Bug Fixes
-
$animator: remove dependency on window.setTimeout (021bdf39)
-
$controller: allow dots in a controller name (de2cdb06)
-
$location:
-
$resource:
-
$rootScope: ensure $watchCollection correctly handles arrayLike objects (6452707d)
-
date filter: correctly format dates with more than 3 sub-second digits (4f2e3606)
-
jqLite: pass a dummy event into triggerHandler (0401a7f5)
-
Directives:
-
scenario runner: correct bootstrap issue on IE (ab755a25)
-
-
$animator/ngAnimate: due to 11f712bc, css transition classes changed from
foo-setup
/foo-start
tofoo
/foo-active
The CSS transition classes have changed suffixes. To migrate rename
.foo-setup {...} to .foo {...} .foo-start {...} to .foo-active {...}
or for type: enter, leave, move, show, hide
.foo-type-setup {...} to .foo-type {...} .foo-type-start {...} to .foo-type-active {...}
-
$resource: due to 53061363, a
/
followed by a.
, in the last segment of the URL template is now collapsed into a single.
delimiter.For example:
users/.json
will becomeusers.json
. If your server relied upon this sequence then it will no longer work. In this case you can now escape the/.
sequence with/\.
-
$browser: should use first value for a cookie. (3952d35a, #2635)
-
$cookieStore: $cookieStore.get now parses blank string as blank string (cf4729fa)
-
$location: back-button should fire $locationChangeStart (dc9a5806, #2109)
-
$parse: Fix context access and double function call (7812ae75, #2496)
-
dateFilter: correctly format ISODates on Android<=2.1 (f046f6f7, #2277)
-
jqLite: correct implementation of mouseenter/mouseleave event (06f2b2a8, #2131)
-
angular.copy/angular.extend: do not copy $$hashKey in copy/extend functions. (6d0b325f, #1875)
-
i18n: escape all chars above \u007f in locale files (695c54c1, #2417)
-
Directives:
- ngPluralize: handle the empty string as a valid override (67a4a25b, #2575)
- select: ensure empty option is not lost in IE9 (4622af3f, #2150)
- ngModel: use paste/cut events in IE to support context menu (363e4cbf, #1462)
- ngClass: should remove classes when object is the same but property has changed (0ac969a5)
-
PhoneCat Tutorial: renamed Testacular to Karma (angular-phonecat)
Note: 1.1.x releases are considered unstable. They pass all tests but we reserve the right to change new features/apis in between minor releases. Check them out and please give us feedback.
Note: This release also contains all bug fixes available in 1.0.6.
-
$compile:
-
$q:
$q.all()
now accepts hash (e27bb6eb) -
$resource: ability to override url in resource actions (60f1f099)
-
$route: add
caseInsensitiveMatch
option for url matching (5e18a15f) -
http:
-
JQLite:
ready()
now supportsdocument.readyState=='complete'
(753fc9e5) -
Scenario: autodisable animations when running e2e tests (fec4ef38)
-
Scope: add
$watchCollection
method for observing collections (5eb96855) -
angular.bootstrap: support deferred bootstrap (mainly useful for tools like test runners and Batarang) (603fe0d1)
-
ngMobile: add ngMobile module with mobile-specific ngClick (707c65d5)
-
Directives:
-
$route: due to 6f71e809, in $routeChangeStart event, nextRoute.$route property is gone. Use the nextRoute object itself instead of nextRoute.$route.
-
ngRepeat: due to 61f2767c, it is now considered an error to have two identical items (identified by the new "track by" expression) in a collection that is fed into the repeater. This behavior was previously tolerated.
-
ngSwitch: due to e88d6179, elements not in the ng-switch were rendered after the ng-switch elements. Now they are rendered in-place.
Templates with ngSwitch directives and nested non-ngSwitchWhen elements should be updated to preserve render order.
For example: The following was previously rendered with
<li>1</li>
after<li>2</li>
:<ul ng-switch="select"> <li>1</li> <li ng-switch-when="option">2</li> </ul>
To keep the old behaviour, use:
<ul ng-switch="select"> <li ng-switch-when="1">2</li> <li>1</li> </ul>
- $compile:
- $http: don't encode URL query substring "null" to "+" (86d191ed)
- $httpBackend: prevent DOM err due to dereferencing .responseText (509ec745, #1922)
- $location:
- $route: make nextRoute.$route private (6f71e809, #1907)
- mocks: prevent NPE when module definition outside of it. (5c735eb4)
- dateFilter: correct timezone date filter for 1/2 hour offsets (1c1cd4fd)
Note: 1.1.x releases are considered unstable. They pass all tests but we reserve the right to change new features/apis in between minor releases. Check them out and please give us feedback.
Note: This release also contains all bug fixes available in 1.0.5.
- $compile:
-
$http:
- do not encode special characters
@$:,
in params (288b69a3)
- do not encode special characters
-
$resource:
- params should expand array values properly (2a212344)
- $http: allow overriding the XSRF header and cookie name (8155c3a2)
-
$parse: added
constant
andliteral
properties (1ed63858) - $resource: expose promise based api via $then and $resolved (dba6bc73)
- $routeProvider: add support to catch-all parameters in routes (7eafbb98)
- Scope:
- angular.noConflict: added api to restore previous angular namespace reference (12ba6cec)
- Directives:
- Filters:
-
$http: due to 288b69a3,
$http now follows RFC3986 and does not encode special characters like
$@,:
in params. If your application needs to encode these characters, encode them manually, before sending the request. - $resource: due to 2a212344, if the server relied on the buggy behavior of serializing arrays as http query arguments then either the backend should be fixed or a simple serialization of the array should be done on the client before calling the resource service.
- $compile:
-
$cookies: set cookies on Safari&IE when
base[href]
is undefined (70909245, #1190) - $http:
-
$resource:
- update RegExp to allow urlParams with out leading slash (b7e1fb05)
- Directives:
- Filters:
- scenario runner: include error messages in XML output (d46fe3c2)
- Misc:
Note: 1.1.x releases are considered unstable. They pass all tests but we reserve the right to change new features/apis in between minor releases. Check them out and please give us feedback.
Note: This release also contains all bug fixes available in 1.0.4.
- $compile: support modifying the DOM structure in postlink fn (cdf6fb19)
- $log: add $log.debug() (9e991ddb, #1592)
- $parse: allow strict equality in angular expressions (a179a9a9, #908)
- $resource:
- $route: allow using functions as template params in 'when' (faf02f0c)
- $timeout-mock: add verifyNoPendingTasks method (f0c6ebc0, #1245)
- directive:
- limitTo filter: limitTo filter accepts strings (9e96d983, #653)
- scenario:
- date: due to cc821502, string input without timezone info is now parsed as local time/date
- $compile:
- $injector:
- $resource:
- $route:
- Scope: ensure that a scope is destroyed only once (d6da505f, #1627)
- angular.equals:
- date filter: parse string input as local time unless TZ is specified (cc821502, #847)
- jqLite:
- scenario: don't trigger input events on IE9 (8b9e6c35)
- Directives:
- $compile: support modifying the DOM structure in postlink fn (cdf6fb19)
Note: 1.1.x releases are considered unstable. They pass all tests but we reserve the right to change new features/apis in between minor releases. Check them out and please give us feedback.
Note: This release also contains all bug fixes available in 1.0.3.
- $cacheFactory: cache.put now returns the added value (168db339)
- $http: Allow setting withCredentials on defaults (209b67df, #1095)
- $resource: support custom headers per action (fbdab513, #736)
- $sanitize: support telephone links (04450c48)
- FormController: add ability to reset a form to pristine state (733a97ad, #856)
- jqLite: add triggerHandler() (650fd933)
- linky filter: allow optional 'target' argument (610927d7, #1443)
- angular-mocks: support mocha in angular mocks (92558fe4)
- ngModel: support ngTrim attribute on input (d519953a)
- scenario: add dblclick method to the ngScenario dsl (8cb9c99e)
- CSP: update to the latest CSP api (af7e0bd0, #1577)
- $http:
- config.param should expand array values properly (see breaking change notes below) (79af2bad, #1363)
- prevent CORS preflight checks by removing
X-Requested-With
from header defaults (see breaking change notes below) (3a75b112, #1004) - prevent CORS preflight checks by not setting
X-XSFR-TOKEN
header for cross domain requests (see breaking change notes below) (fce100a4, #1096)
- $evalAsync: have only one global async queue (331cd5a8)
-
Due to fix for #1363 it's possible but unlikely that $http will start generating different URLs for requests. This affects only cases when a request is made with a parameter, value of which is an array. If the server relied on the buggy behavior then either the backend should be fixed or a simple serialization of the array should be done on the client before calling the $http service.
-
Due to fix for #1004 the
X-Requested-With
header is not set by $http service any more. If anyone actually uses this header it's quite easy to add it back via:myAppModule.config(['$httpProvider', function($httpProvider) { $httpProvider.defaults.headers.common["X-Requested-With"] = 'XMLHttpRequest'; }]);
-
Due to fix for #1096
X-XSFR-TOKEN
header is no longer send for cross domain requests. This shouldn't affect any known production service. If we are wrong, please let us know ;-)
- $cacheFactory: return undefined when removing non-existent entry (55d15806, #1497)
- $compile:
- $injector: more conservative annotation parsing
-
$location: reset
$replace with every watch call (a32bc40f, #1111) (d9eff86e) - $parser: string concatination with undefined model (42c38b29, #988)
- $resource:
- Scope:
- $route: support inline annotation on .resolve (b0a05a75)
- FormController: propagate dirty state to parent forms (04329151)
- a: prevent Opera from incorrectly navigating on link click (c81d8176)
- jqLite:
- Filters
-
Directives
- ngClass: works with class interpolation (cebd015f, #1016)
- ngClassOdd/ngClassEven: support shrinking/reordering in repeaters (d859dcec, 6c67719d, #1076)
- ngModel: sync ngModel state with scope state (e6d9bea4, #933)
- ngRepeat: now works better with primitive types (e6d9bea4, #933)
- ngSrc: don't set src if value is empty string (b6e4a711)
- select: select option with a label of 0 is not shown (b3cae4f4, #1401)
- scenario:
- add plunkr support (7c67b2fb)
- various small documentation fixes and improvements
Note: 1.1.x releases unlike 1.0.x are considered unstable. More info
This release also contains all bug fixes available in 1.0.2.
- $http: support custom reponseType (e0a54f6b, #1013)
- $interpolate:
- $sniffer: auto detect CSP mode (currently requires Chrome on dev channel) (167aa0c2)
- $compile: denormalize directive templates (dfe99836)
- $interpolate: $interpolateProvider.endSymbol() returns startSymbol (20348717)
- jqLite: better support for xhtml (d3fa7a2e, #1301)
- mocks: free up memory after every spec (1a8642aa)
- e2e test runner: Adding meta tag to avoid cache issues (5318588d)
- Directives:
- Conceptual Overview of AngularJS (high level overview of how things work): http://docs.angularjs.org/guide/concepts (7a5f25f6)
- Lots of spelling, grammar and other fixes: 9a710c78, 847d2da0, dbefd671, cab5e1d9, f00b6cca, 2e365168, 536de148, a1107e81, 5ef9ed87, 8c81a0f3, bde931af, 6553fe68, 13b5fd1b, 17209d5b, 31c82560, ab6937e2, fbfda241, 206371b7, b6b92bd8, 79f2d843, 64a9cd8f, 7f6e1326, 1fd2b3d4, d56d69cc, 01e726b2, 16136216, 92a3d282, 4c585019, c076fe08, 2473412b, 1f2d5000, 5026315d, f0a090dd, 6d9313a6) and more!
- $location: don't throw exception while url rewriting if element was removed (3da4194f, #1058)
- $location: prevent ie from getting into redirect loop (ffb27013, #1075, #1079, #1085)
- $location:
- $route:
- $compile: simplify isolate scope bindings and introduce true two-way data-binding between parent scope and isolate scope (c3a41ff9)
- $injector: provide API for retrieving function annotations (4361efb0)
- $location: add $locatonChange[start|success] event - since events are cancelable, it's now possible to cancel route and location changes. (92a2e180)
- $rootElement: expose application root element as $rootElement service (85632cb4)
- $compile: correctly merge class attr for replace directives (contributed by Max Martinsson, fb99b539, #1006)
- $http: add utf-8 to default Content-Type header (post/put) (10f80d7d)
- $timeout: allow calling $timeout.cancel() with undefined (contributed by Ali Mills, 1904596e)
- jqLite: don't eat event exceptions (416a7830)
-
$beforeRouteChange and $afterRouteChange events were renamed to $routeChangeStart and $routeChangeSuccess
This was done to make the naming consistent with $location events and also get events to categorize and order nicely just by alphabetical sorting.
(7c242821)
-
template
option in $route definition was renamed totemplateUrl
The
template
options in $route definition now represents the actual template string. To provide the template url usetemplateUrl
option instead. This was done to unify the directive and $route definitions.To migrate just rename
template
totemplateUrl
. (0a6e464a) -
isolate scope bindings definition has changed
To migrate the code follow the example below:
Before:
scope: { myAttr: 'attribute', myBind: 'bind', myExpression: 'expression', myEval: 'evaluate', myAccessor: 'accessor' }
After:
scope: { myAttr: '@', myBind: '@', myExpression: '&', // myEval - usually not useful, but in cases where the expression is assignable, you can use '=' myAccessor: '=' // in directive's template change myAccessor() to myAccessor }
-
the inject option for the directive controller injection was removed
The removed
inject
wasn't generally useful for directives so there should be no code using it. (c3a41ff9)
-
$timeout: add
$timeout
service that supersedes$defer
(4511d39c, #704, #532) -
scope: add
event.preventDefault()
andevent.defaultPrevented
(84542d24)
-
ngRepeat: expose
$first
,$middle
and$last
instead of$position
(1d388676, #912) - jqLite: use the same expando store structure as jQuery (acf095d1)
- $rootScope: infinite digest exception does not clear $$phase (5989a1ed, #979)
-
ngRepeat -
$position
is not exposed in repeater scopes any moreTo update, search for
/\$position/
and replace it with one of$first
,$middle
or$last
. (1d388676) -
scope event's
cancel
method was renamed tostopPropagation
The name was corrected in order to align better with DOM terminology. To update, search for
/\.\s*cancel\s*(/
and replace it with.stopPropagation(
or.preventDefault(
(or both) depending on what you actually need. (91db9920)
-
$defer
service has been deprecated in favor of$timeout
serviceThe
$defer
service will be removed before 1.0 final, so please migrate your code. (4511d39c)
- $location:
- docs app: get docs app to work on IE8 (aa025348)
- jqLite: support data() getter and data(obj) setter (ee579a07)
-
$compile:
- have $observe return registration function (7f0eb151)
- ignore ws when checking if template has single root (9c0418cf, #910)
- fix replaceWith (b431ee38)
- attach scope to the directive element when templateUrl and replace=true (705f4bbf)
- prevent duplicate directive controller instantiation (843f762c, #876)
- $parse: support methods on falsy primitive types (499a76a0)
- ngModel: use keydown/change events on IE9 instead of input (49dfdf8f, #879)
- ngSrc,ngHref: binding should set element prop as well as attr (b24cc63b, #935)
- scenario: make browser().location() working if ng-app on other than (5bcb749a)
- select: don't interfere with selection if not databound (3bd3cc57, #926)
- Brand new bootstrap-based skin for api docs: http://docs.angularjs.org/
- jqlite:
- Tutorial has been finally updated to AngularJS v1.0! Check it out and provide feedback to make it even better: http://docs.angularjs.org/tutorial
- http://docs-next.angularjs.org now redirects to http://docs.angularjs.org
- select: properly handle empty & unknown options without ngOptions (904b69c7)
- compiler: reading comment throws error in ie (46bb08a9)
- document: accidental clobbering of document.getAttribute (eafe15f5, #877)
- script: Incorrectly reading script text on ie (94dd6857)
- $location: properly rewrite urls in html5 mode with base url set + don't rewrite links to different base paths (6d7e7fde, 0a5050eb)
- e2eRunner: $browser.location should delegate to apps $location (df72852f)
- input.radio: support 2-way binding in a repeater (93d62860, #869)
- ngBindHtml: clear contents when model is falsy (10daefc6, #864)
- lots of doc fixes
- $http: expose the defaults config as $http.defaults (dceafd32)
- docs: steps 0-4 of the Tutorial have been updated and improved
-
ng-ext-link
directive was removed because it's unnecessary (6d7e7fde)apps that relied on ng-ext-link should simply replace it with
target="_self"
-
$browser.addCss
was removed - it was never meant to be a public api (13d5528a)apps the depend on this functionality should write a simple utility function specific to the app (see this diff for hints).
-
$browser.addJs
method was removed - it was never meant to be a public api (fbaa1968)apps that depended on this functionality should either use many of the existing script loaders or create a simple helper method specific to the app.
-
$sanitize
service,ngBindHtml
directive andlinky
filter were moved to thengSanitize
module (5bcd7198)apps that depend on any of these will need to load
angular-sanitize.js
and includengSanitize
in their dependency list:var myApp = angular.module('myApp', ['ngSanitize']);
- $compile: relax the restriction that directives can not add siblings (7e86eacf)
- $location: search setter should not double-encode the value (59fa40ec, #751)
- $q: $q.reject should forward callbacks if missing (c0b78478, #845)
-
build: move
'use strict';
flag into the angular closure (637817e3) -
Directives:
- ngModel: update model on each key stroke (revert ngModelInstant) (06d09550)
- booleanAttrs: always convert the model to boolean before setting the element property (dcb8e076)
- form: preperly clean up when invalid widget is removed (21b77ad5)
- ngHref: copy even if no binding (2f5dba48)
- ngInclude: fire $includeContentLoaded on proper (child) scope (199ac269)
-
$http: add
withCredentials
config option (86182a94) - $route: allow chaining of whens and otherwise (15ecc6f3)
- ngInclude: allow ngInclude as css class (428f2b56)
- reintroduced the tutorial docs - currently only steps 0-3 are up to date and the code is not split up into step specific commits yet. See this branch instead.
- various other doc fixes
We removed two useless features:
- $routeProvider.when used to return the route definition object but now it returns self (15ecc6f3)
- ngInclude does not have scope attribute anymore (5f70d615)
- ngModelInstant directive is no more and ngModel behaves just as ngModelInstant used to. This doesn't really break anything, just remember to remove all ngModelInstant references from your template as they serve no purpose now. (06d09550)
- $compile:
- angular.forEach: should ignore prototypically inherited properties (8d7e6948, #813)
- initialization: use jQuery#ready for initialization if available (cb2ad9ab, #818)
- $q: resolve all of nothing to nothing (ac75079e)
- $compile: do not interpolate boolean attribute directives, rather evaluate them (a08cbc02)
- $controller: support controller registration via $controllerProvider (d54dfecb)
- $http:
- TzDate: add support for toISOString method (da9f4dfc)
- jqLite: make injector() and scope() work with the document object (5fdab52d)
- ngValue: directive that allows radio inputs to have non string values (09e175f0, #816)
-
$resource
,$cookies
and$cookieStore
services are now distributed as separate modules, seeangular-resource.js
andangular-cookies.js
. (798bca62, 7b22d59b) - angular.fromJson doesn't deserialize date strings into date objects. (ac4318a2)
- angular.toJson always use native JSON.parse and JSON.stringify - this might break code that consumes the output in whitespace-sensitive way (35125d25)
- IE7 and older have are now required to polyfill the JSON global object (87f5c6e5)
- boolean attr directives (ng-disabled, ng-required, etc) are evaluated rather than interpolated (a08cbc02)
-
ng-bind-attr
directive removed (55027132) - any app that depends on $sniffer service should use Modernizr instead (aaedefb9)
- $route: when matching consider trailing slash as optional (a4fe51da)
- jqLite: add .controller() method (6c5a05ad)
- scope.$eval: allow passing locals to the expression (192ff61f)
- input[type=radio]: allow the value attribute to be interpolated (ade6c452)
- $http: don't send Content-Type header when no data (1a5bebd9, #749)
- $resource: support escaping of ':' in resource url (6d6f8753)
- $compile:
- $log: avoid console.log.apply calls in IE (15213ec2, #805)
- json: added support for iso8061 timezone (5ac14f63)
- e2e runner: fix typo that caused errors on IE8 (ee5a5352, #806)
- directives:
The compiler was completely rewritten from scratch using ideas from this design document. Please check out the $compile and $compileProvider.directive docs. The biggest improvements and changes are listed below.
-
the compiler now transparently supports several directive syntaxes. For example while before there was just one way to use
ng:include
directive:<ng:include src="someSrc"></ng:include>
. The new compiler treats all of the following as equivalent:<ng:include src="someSrc"></ng:include>
<ng-include src="someSrc"></ng-include>
<x-ng-include src="someSrc"></x-ng-include>
<div ng:include src="someSrc"></div>
<div ng-include src="someSrc"></div>
<div data-ng-include src="someSrc"></div>
<div ng:include="someSrc"></div>
<div ng-include="someSrc"></div>
<div data-ng-include="someSrc"></div>
<div class="ng-include: someSrc"></div>
This will give template creators great flexibility to consider the tradeoffs between html code validity and code conciseness and pick the syntax that works the best for them.
-
we are switching all of our code/docs/examples to use
ng-foo
directive name style instead ofng:foo
. The new compiler doesn't distinguish between these and other name styles (all of them are equally supported), the main difference is thatng-foo
is easier to select with css selectors. Check out the Internet Explorer Compatibility doc to learn about various IE-related requirements for different directive naming styles. -
angular.directive
,angular.widget
,angular.attrWidget
were merged into a single concept: adirective
which is registered via myModule.directive or $compileProvider.directive. You can control execution priority of multiple directives on the same element (previously the main difference between a attribute widget and a directive) via a directive priority setting. -
previously the linking functions of directives were called top to bottom following the DOM tree, to enable a linking fn to work child DOM nodes that were already processed by child linking fns the order was changed as follows: compile functions run top to bottom following the DOM tree, but linking functions run bottom-up following the DOM tree. In some rare cases it is desirable for linking fns to be called top to bottom and for these it is possible to register "prelinking" functions (check out the docs for the return value of the compile function).
-
angular.markup
andangular.attrMarkup
were replaced with interpolation via$interpolate
service.-
In the past
{{foo}}
markup was getting translated to<span ng-bind="foo"></span>
during the early stage of template compilation. Addition of this extra node was in some cases undesirable and caused problems. The new compiler with the help of the $interpolate service removes the need for these artificial nodes. -
As a side-effect of not using artificial nodes available for all bindings, the
html
filter which used to innerHTML (sanitized) html into the artificial node was converted into a directive. So instead of{{ someRawHtml | html }}
use<div ng-bind-html="someRawHtml"></div>
and instead of{{ someRawHtml | html:"unsafe" }}
use<div ng-bind-html-unsafe="someRawHtml"></div>
. Please check out the ng-bind-html and ng-bind-html-unsafe directive docs. -
Custom markup has been used by developers only to switch from
{{ }}
markup to(( ))
or something similar in order to avoid conflicts with server-side templating libraries. We made it easier to do this kind of customization by making the start and end symbol of the interpolation configurable via $interpolateProvider.
-
-
template loader loads template fragments from script elements and populates the $templateCache with them. Templates loaded in this way can be then used with
ng-include
,ng-view
as well as directive templates (see thetemplateUrl
property of the directive config object).
The implementation of forms and input bindings was modified to address issues around composability, ease of adding custom validation and formatting. Please check out the forms dev guide article to learn about forms, form control bindings and input validation. The biggest changes are listed below.
-
any directive can add formatter/parser (validators, convertors) to an input type. This allows better composability of input types with custom validators and formatters. So instead of creating new custom input type for everything, it's now possible to take existing input type and add an additional formatter and/or validator to it via a custom directive.
-
inputs propagates changes only on the blur event by default (use new
ng-model-instant
directive if you want to propagate changes on each keystroke). -
no more custom input types, use directives to customize existing types.
-
removed $formFactory.
-
removed parallel scope hierarchy (forms, widgets).
-
removed
list
input type (useng-list
directive instead). -
removed integer input type.
Controllers are now standalone objects, created using the "new" operator, and not mixed with scope object anymore. This addresses many issues including: #321 and #425.
The design doc explains the reasoning for this major change and how it solves many issues.
function MyCtrl() { var self = this; this.model = 'some model of any type'; this.fnUsedFromTemplate = function() { someApiThatTakesCallback(function callbackFn() { self.model = 'updatedModel'; }); }; }
function MyCtrl($scope) { $scope.model = 'some model of any type'; $scope.fnUsedFromTemplate = function() { someApiThatTakesCallback(function() { $scope.model = 'updatedModel'; }); } }
Temporary backwards compatibility: Load the following module in your app to recreate the previous behavior and migrate your controllers one at a time: https://gist.github.com/1649788
-
As advertised in the past we moved the $route configuration from the run phase of the application to the config phase. This means that instead of defining routes via
$route.when
/$route.otherwise
you should use$routeProvider.when
/$routeProvider.otherwise
instead. -
route scope is now being created by the
ng-view
rather than by$route
, this resolved many issues we've previously faced. For more info, read the commit message. -
removed
$route.parent()
- it's unnecessary because the scope is properly created in the scope hierarchy byng-view
. -
new
$viewContentLoaded
and$includeContentLoaded
events which directives can use to be notified when a template content is (re)loaded. -
ng-view
now hasonload
attribute which behaves similarly to the one onng-include
.
ng-model
binding on select[multiple] element should support binding to an array (commit)- event object is now accessible as
$event
inng-click
and other directives (commit, issue #259 ng-class
directive now support map of classnames and conditions e.g.<div ng-class="{'hide': !visible, 'warning': isAlert()}"...
(contributed by Kai Groner) (commit)
-
scope.$emit
/$broadcast
return the event object, add cancelled property (commit) -
scope.$new()
takes one argument - a boolean indicating if the newly-created child scope should be isolated (not prototypically inheriting from the current scope). Previously the first argument was reference to the controller constructor, but because of the scope/controller separation the controllers should be instantiated via the$controller
service. (commit) -
fn signature change for change listener functions registered via
scope.$watch
- this means that the scope object can be listed in the arguments list only if it's needed and skipped otherwise. (commit)- before:
scope.$watch('someModel', function(scope, newVal, oldVal) {})
- after:
scope.$watch('someModel', function(newVal, oldVal, scope) {})
- before:
-
scope.$watch
now compares object by reference and only if extra boolean flag is passed comparison by equality is used. This was done to avoid unintended performance issues. (commit)- before:
scope.$watch('expression', function(scope, newVal, oldVal) {})
- after:
scope.$watch('expression', function(newVal, oldVal, scope) {}, true)
- before:
-
scope.$destroy
doesn't cause the$destroy
event to be emitted any more - this event was primarily used by the old forms implementation and is not needed any more. We are considering broadcasting this event in the future, which could then be used by directives and child scopes to be notified of their scope destruction.
-
$injector.instantiate
should return the object returned from constructor if one was returned (commit) -
$injector.instantiate
should support array annotations for Type argument (e.g. instantiate(['dep1', 'dep2', Type])) (commit) - quickly fail if circular dependencies are detected during instantiation (commit)
- added $provide.constant to enable registration of constants that are available in both the config and run phase (commit)
-
$provide.service
was renamed to $provide.provider (commit) -
$provide.service
takes a constructor fn and creates a service instance by using $injector.instantiate
- added
contents()
(commit) - added
wrap()
(commit) - fix memory leaking in IE8 (remove monkey patched methods on Event) (commit, commit)
- fix incorrect comparison of dates by angular.equals (commit)
-
scope.$watch
support watching functions (commit, commit) -
$http
should not json-serialize File objects, instead just send them raw (commit) -
$compile
should ignore content of style and script elements (commit, commit) -
TzDate#getDay()
should take into account the timezone offset (contributed by Stephane Bisson) (commit)
$parse
service now supports local vars in expressions (commit)
- Dependency injection subsystem rewrite. This is a huge change to the Angular core that was necessary for many reasons. Please read the full design doc to understand the changes and reasoning behind them.
- Added angular.bootstrap for manual bootstrapping of the app. Also see Initializing Angular App doc.
- Helper functions inject and module that make testing with DI and jasmine a lot easier.
-
jqLite and jQuery were extended with helper method
injector()
that simplifies the access to the application injector during debugging. - Rewrite of $xhr service and its dependencies, which was replaced with $http service. The $browser.xhr and its mock were replaced by $httpBackend and its unit testing and end-to-end testing mocks. The $resource service api and functionality was preserved, with the exception of caching, which is not happening automatically as it used it in the past (verifyCache has no effect).
- $q - Q-like deferred/promise implementation (commit)
- Transparent data-binding to promises in templates. Example (commit)
- New $anchorScroll service that watches url hash and navigates to the html anchor even if the content was loaded via ng:view (for ng:include you have to opt into this behavior using autoscroll attribute)
- New LRU cache factory - $cacheFactory service
- jQuery 1.7 compatibility
- Directive names are now case insensitive (commit)
- $location#url setter fix (Issue #648)
- ng:include - prevent race conditions by ignoring stale http callbacks (commit)
- ng:repeat - support repeating over array with null (commit)
- angular.copy - throw Error if source and destination are identical (commit)
- Forms should not prevent POST submission if the action attribute is present (commit)
- App bootstrapping works differently (see angular.bootstrap and ng:app and bootstrapping)
- scope.$service is no more (because injector creates scope and not the other way around), if you really can't get services injected and need to fetch them manually then, get hold of $injector service and call $injector.get('serviceId')
- angular.service style service registration was replaced with module system, please see angular.module api and DI documentation for more info.
- the $xhr service was replaced with $http with promise based apis.
- unit-testing $httpBackend's expect method (the replacement for $browser.xhr.expect) is stricter - the order of requests matters and a single request expectation can handle only a single request.
- compiler
- compiler is a service, so use $compile instead of angular.compile to compile templates
- $compile (nee angular.compile) returns the linking function which takes one mandatory argument - the scope. previously this argument was optional and if missing, the compiler would create a new root scope, this was a source of bugs and was removed
- filters
- filters need to be registered either via moduleName.filter or $filterProvider.filter
- filters don't have access to the dom element
- currency filter doesn't make negative values red
- json filter doesn't print out stuff in monospace
- type augmentation via angular.Array, and angular.Object is gone. As a replacement use filters (filter, limitTo, orderBy), ES5 apis (e.g. Array#indexOf), or create custom filters (e.g. as a replacement for $count and $sum).
- $browser.defer.flush now throws an exception when queue is empty (commit)
- scope.$apply and scope.$digest throws an exception if called while $apply or $digest is already in progress (this is a programming error, you should never need to do this) (commit)
- ng:autobind: drop angular.js file name restrictions (commit)
- Scope: better logging of infinite digest error (commit, issue #621)
- enable widget styling in IE8 and below using html5shiv-like approach (commit, issue #584)
- ng:style: compatibility + perf improvements (commit)
- ng:view: ignore stale xhr callbacks - fixes issues caused by race-conditions which occurred when user navigated to a new route before the current route finished loading (issue #619)
- ng:form should always be a block level (css) element (commit)
- Fixes for e2e test runner's
$location
dsl (commit) - ng:repeat when iterating over arrays ignore non-array properties + when iterating over objects sort keys alphabetically (commit)
- experimental disqus.com integration for all docs-next.angularjs.org pages (commit, contributed by Dan Doyon)
- e2e test runner docs were moved to the dev guide
- New validation options for
input widgets:
ng:minlength
andng:maxlength
(commit) (contributed by Konstantin Stepanov) - HTML sanitizer was updated to recognize all safe HTML5 elements (Issue #89)
- ng:options' blank option is now compiled and data-bound as any other template (Issue #562) (contributed by tehek)
-
$defer service now exposes
cancel
method for task cancellation (commit)
- ng:options should select correct element when '?'-option (invalid value) was previously selected (Issue #599) (contributed by Tehek)
- Fix data-binding of radio button's value property (Issue #316)
- Input with type
password
should no be turned into a readable text field (commit) (contributed by Konstantin Stepanov) -
ng:repeat should ignore object properties starting with
$
(commit) - Correctly parse out inlined regexp from the input field's
ng:pattern
attribute. (commit) - $location service in html5 mode should correctly rewrite links that contain nested elements (commit)
- the date filter now uses 'mediumDate' format if none is specified. This was done to deal with browser inconsistencies (each browser used to use different format) (Issue #605, commit, commit)
- calling the linker function returned by angular.compile doesn't automatically run
$digest
on the linked scope any more. This behavior was briefly introduced in 0.10.3 but was causing issues and inefficiencies in production apps so we reverted it. See: commit
-
New forms, validation, support for HTML5 input widgets. Please check out:
-
ng:repeat now has element-model affinity, which makes it more friendly to third-party code that is not aware of angular's DOM manipulation. This is also the pre-requisite for supporting animations. (commit)
- The select widget with ng:options directive now correctly displays selected option (regression from 0.10.2).
- Fix for jqLite's removeClass, which under certain circumstances could clobber class names. (commit)
- Other small fixes and documentation improvements.
- Due to changes in how forms and validation works the following were replaced with new apis:
-
angular.formatter
- useangular.inputType
or form's$createWidget
-
angular.validator
- useangular.inputType
or form's$createWidget
- changes to
<input>
and<select>
elements-
ng:model
directive is now required for data-binding to kick in - the
name
attribute is now optional and is used only as an alias when accessing the input widget via the form object. - view can't affect the model without a user interaction, so the
value
attribute of the<input>
element andselected
attribute of the<option>
element if specified in the template is ignored.
-
-
- Removed decoration of DOM elements when:
- an exception occurs - when an exception happens, it will be passed to the $exceptionHandler service, which can decide what to do with it.
- an input widget contains invalid input - in this case the forms validation apis can be used to display a customized error message.
- The $hover service was removed (it was needed only for the DOM decoration described above).
- Added support for short-circuiting of && and || operators in in angular expressions (Issue #433)
- Fix for $limitTo to properly handle excessive limits (contributed by tehek) (Issue #571)
- jqLite's css() method now converts dash-separated css property names to camelCase in order to support dash-separated properties on Firefox (Issue #569)
- action defaults for $resources now take precedence over resource defaults (contributed by Marcello Nuccio) (commit)
- Fixed escaping issues in $route matcher (commit)
- Fixed two issues in $browser.defer.cancel mock (commit, commit)
- Fix for ng:options, which under certain circumstances didn't select the right option element (commit)
- If Angular is being used with jQuery older than 1.6, some features might not work properly. Please upgrade to jQuery version 1.6.4.
- ng:repeat no longer has ng:repeat-index property. This is because the elements now have affinity to the underlying collection, and moving items around in the collection would move ng:repeat-index property rendering it meaningless.
- complete rewrite of the $location service with HTML5 support, many API and semantic changes.
Please see:
- $location service API docs
- $location service dev guide article
- location.js source file
- breaking changes section of this changelog
- $xhr should not covert HTTP status 0 to 200 (commit)
- fixed several doc examples that were broken on IE
- ng:change should be called after the new val is set (Issue #547)
- currency filter should return an empty string for non-numbers
- $location related changes - for complete list of api changes see:
Migrating from earlier AngularJS releases
-
$location api changes:
- $location.href -> $location.absUrl()
- $location.hash -> $location.url()
- $location.hashPath -> $location.path()
- $location.hashSearch -> $location.search()
- $location.search -> no equivalent, use $window.location.search (this is so that we can work in hashBang and html5 mode at the same time, check out the docs)
- $location.update() / $location.updateHash() -> use $location.url()
- n/a -> $location.replace() - new api for replacing history record instead of creating a new one
-
$location semantic changes:
- all url pieces are always in sync ($location.path(), $location.url(), $location.search(), ...) - this was previously true only if you used update* methods instead of direct assignment ($location.hashPath = 'foo')
- we now use (window.history.pushState || onHashChange event || polling) for detecting url changes in the browser (we use the best one available).
-
- complete rewrite of the Scope implementation with several API and semantic changes. Please see:
- angular.scope API docs
- scopes dev guide article
- scope.js source file
- breaking changes section of this changelog
- added event system to scopes (see $on, $emit and $broadcast)
- added i18n and l10n support for date, currency and number filters see i18n docs for more info
- added localizable ng:pluralize widget
- added ng:cloak directive for hiding uncompiled templates
- make ng:class friendly towards other code adding/removing classes (commit)
- several jqLite bugfixes and improvements
- ng:href, ng:src and friends now work properly when no expression is present in the attribute value. (Issue #534)
- expose missing lowercase, uppercase and isDate APIs.
- many (but not all just yet) api docs were proof-read and improved
- many scope related changes:
- $onEval is no more (use $watch with a fn as the only param if you really miss it)
- $eval without params doesn't trigger model mutation observations (use $apply/$digest instead)
- $digest propagates through the scope tree automatically (this is the desired behavior anyway)
- $watch various API changes
- scope is now the first argument passed into the $watch listener
-
this
in the $watch listener is undefined instead of current scope - objects and arrays are watched and compared by equality and not just identity
- the initial execution of the $watch listener now executes asynchronously with respect to the code registering it via $watch
- exceptionHandler argument is no more
- initRun argument is no more
- angular.scope does not create child scopes by taking parent as the first argument - use $new instead
- scope.$set and scope.$get were removed, use direct property assignment instead or $eval
- $route.onChange was removed and replaced with $beforeRouteChange, $afterRouteChange and $routeUpdate events that can be used together with the new $routeParams service
-
angular.equals()
now uses===
instead of==
when comparing primitives
- added error handling support for JSONP requests (see error callback param of the $xhr service) (commit)
- exposed http response headers in the $xhr and $resource callbacks (commit contributed by Karl Seamon)
- added
reloadOnSearch
$route param support to prevent unnecessary controller reloads and resulting flicker (commit)
- fixed memory leak found in ng:options directive (commit)
- make ng:class-even/odd compatible with ng:class (Issue #508)
- fixed error handling for resources that didn't work in certain situations (commit contributed by Karl Seamon)
- jsFiddle integration for all docs.angularjs.org examples (contributed by Dan Doyon).
- removed jqLite show/hide support. See the
commit
message for details. Developers should use jquery or jqLite's
css('display', 'none')
andcss('display', 'block'/'inline'/..)
instead
- ECMAScript 5 Strict Mode compliance
-
jqLite
- added
show()
,hide()
andeq()
methods to jqlite (commit)
- added
- added $defer.cancel to support cancellation of tasks defered via the $defer service
-
date filter
- added support for
full
,long
,medium
andshort
date-time format flags (commit) - added support for
z
flag, which stands for short string timezone identifier, e.g. PST - internal improvements to enable localization of date filter output
- added support for
-
number filter
- internal improvements to enable localization of number filter output
-
currency filter
- support for custom currency symbols via an optional param
- internal improvements to enable localization of number filter output
- added angular.version for exposing the version of the loaded angular.js file
- updated angular.js and angular.min.js file headers with angular version and shorter & updated license info
- ng:options
- $xhr and $resource support for per-request error callbacks (Issue #408) (contributed by Karl Seamon)
- make injector compatible with Rhino (HtmlUnit) (contributed by Mårten Dolk) commit
ie-compat.js
fixes and improvements related to fetching this file on the fly on legacy browsers- jqLite
- improved implementation of ng:show and ng:hide directives by using jqLite/jQuery hide and show methods
- ng:options
- fix incorrect re-growing of options on datasource change (Issue #464)
- added full offline support for docs (click on the link in the footer of docs.angularjs.org)
- many content improvements and corrections across all docs (reference api, tutorial, dev guide)
- many small design improvements
- doubled our e2e test suite by running all angular e2e tests with jqLite in addition to jQuery
- commit
removed support for the
MMMMM
(long month name), useMMMM
instead. This was done to align Angular with Unicode Technical Standard #35 used by Closure, as well as, future DOM apis currently being proposed to w3c. $xhr.error
'srequest
argument has nocallback
property anymore, usesuccess
instead
- New ng:options directive to better bind a model to
<select>
and<option>
elements. - New ng:disabled, ng:selected, ng:checked, ng:multiple and ng:readonly directives.
- Added support for string representation of month and day in date filter.
- Added support for
prepend()
to jqLite. - Added support for configurable HTTP header defaults for the $xhr service.
- Number filter would return incorrect value when fractional part had leading zeros.
- Issue #338: Show error when template with with multiple DOM roots is being compiled.
- Issue #399: return unsorted array if no predicate.
- Fixed issues with incorrect value of $position in ng:repeat when collection size changes.
- Fixed JSONP support in $xhr which didn't work without jquery since v0.9.13.
- various small fixes and improvements
- $service now has $service.invoke for method injection ($service(self, fn) no longer works)
- injection name inference no longer supports method curry and linking functions. Both must be explicitly specified using $inject property.
- Dynamic iteration (ng:repeat) on
<option>
elements is no longer supported. Use ng:options - Removal of index formatter (
ng:format="index"
) since its only use was with repeated<options>
(see above). - Calling $orderBy without a predicate now returns the original unsorted array, instead of ordering by natural order.
- JsTD Scenario Adapter for running scenario tests with jstd (from command line and in multiple browsers)
- brand new template for http://docs.angularjs.org/
- brand new tutorial that describes how to build a typical angular app http://docs.angularjs.org/#!/tutorial
- lots of new content for the dev guide (still work in progress) http://docs.angularjs.org/#!/guide
- ng:href produces unclickable links on IE7 #352
- IE 8 in compatibility mode breaks routing #353
- IE translates a 204 response code to 1223 #357
- Fixed unit test in IE7 #360
- Fixed unit tests on FF4, Opera #364
- Fixed opera date.toISOString issue #367
- html scenario runner requires ng:autotest script attribute to start tests automatically (example)
- IE9 support
- reverted ng:view sync cache fix due to regression in the order of initialization of parent and child controllers. (commits 9bd2c396 and 3d388498)
-
$resource success callback is now executed whenever the http status code is
<200,300>
- fixed intentation code that caused some of the snippets on docs.angularjs.org to be mangled.
- many small improvements of the api docs.
- ng:repeat grows (adds children) significantly faster. (commit 15ec78f5)
- $xhr.cache optionally executes callbacks synchronously. (commit c06c5a36)
- ng:view and ng:include use sync $xhr.cache
- Fixed $resource encoding of query params. (commits e1d122a4, 78a0f410)
- code cleanup
- better minification (min is now 2.5% or almost 1kb smaller)
- minor documentation fixes
- JsTestDriver 1.3.2 upgrade with fixed coverage support
- Added XSRF protection for the $xhr service. (commit c578f8c3)
- Targeted auto-bootstrap – ng:autobind now takes an optional value which specifies an element id to be compiled instead of compiling the entire html document. (commit 9d5c5337)
- Fixed IE7 regression which prevented angular from bootstrapping in this browser.
- Cookies which contain unescaped '=' are now visible via the $cookies service. (commit 26bad2bf)
- $xhr service now executes "success" callback for all 2xx responses, not just 200. (commit 5343deb3)
- Always remove the script tag after successful JSONP request. (commit 0084cb5c)
- Removal of all
document.write
statements to make angular compabile with async script loaders. (commit 3224862a)
- The
post
parameter of [$browser.xhr][$browser] is now non-optional. Since everyone should be using the $xhr service instead of $browser.xhr, this should not break anyone. If you do use $browser.xhr then just add null for the post value argument where post was not passed in.
- Added a delay parameter to the $defer service. (commit edbe9d8c)
- Added
scope()
method to angular.element (jQuery) instances to retrieve a scope associated with a given DOM element. (commit 0a5c00ab) - Added inference of DI dependencies from function signature. This feature is experimental, check out dependency injection docs. (commit 7d4aee31)
- Angular now correctly recognizes and uses jQuery even if it was loaded after angular's script. More info at angular.element. (commit a004d487)
- All built-in angular services are now lazy-loaded. (commit a070ff5a)
- To make styling of custom html tags created via widgets and directives
easier, all of these elements now contain a css class with name in form of
<namespace>-<directive/widget name>
, e.g.<ng:include class="ng-include">
. (commit c7998f5f) - $xhr service now automatically detects and strips google-style JSON security prefix from http responses. (commit cd139f57)
- Rewrite of JQuery lite implementation for better supports operations on multiple nodes when matched by a selector and remove other bugs. (commit 00cc9eb3)
- Corrected an issue where properties inherited from __proto__ show up in ng:repeat. (commit 9e67da42)
- Fixed url encoding issue affecting $resource service. (commits e9ce2259 + 9e30baad)
- Removed
$eval()
call from the $cookies factory function, which was causing duplicate instances of singleton services to be created. (commit 65585a2d)
- New docs contribution guidelines.
- New description of release artifacts.
- Lots of improvements and other new content.
-
Removed the
$init()
method that used to be called after compilation of a template. This should affect only fraction of angular apps because the api was primarily being used by low level widgets tests.The old way of compiling the DOM element was angular.compile(element).$init(); The $init was there to allow the users to do any work to the scope before the view would be bound. This is a left over from not having proper MVC. The new recommended way to deal with initializing scope is to put it in the root constructor controller. To migrate simply remove the call to $init() and move any code you had before $init() to the root controller.
(commit 23b255a8)
-
Changed angular.compile API from
angular.compile(element[, scope])
toangular.compile(element)([scope], [cloneAttachFn])
(commits ef4bb28b + 945056b1) -
Removed ng:watch directives since it encourages logic in the UI. (commit 87cbf9f5)
- completed migration of docs from the wiki site to http://docs.angularjs.org/
- many, but by far not all, docs were updated, improved and cleaned up
-
$route service now supports these features:
- route not found handling via
#otherwise()
- redirection support via
#when('/foo', {redirectTo: '/bar'})
(including param interpolation) - setting the parent scope for scopes created by the service via
#parent()
- reloading the current route via
#reload()
- route not found handling via
- added
angular.element(...).scope()
method to retrieve scope for a given element.
- value attribute gets clobbered when the element contains new line character(s).
- ng:view widget now works when nested inside an ng:include widget
- other various small fixes
- mock
$browser
now throws an exception if theflush()
method is called when there are no requests to be flushed. If you experienceNo xhr requests to be flushed!
errors in your tests, it's because you called$browser.xhr.flush()
unexpectedly. To make the error go away, either make sure your code makes a request via the$xhr
service or remove all unneededflush()
calls.
- new
ng:view
widget to simplify integration with the$route
service - the content of all standard HTML widgets is now being processed
(e.g.
<button>{{foo}}</button>
works now) (commit 1d7b9d56) - new
$log
and$exceptionHandler
service mocks now part ofangular-mocks.js
(commit f5d08963)
- (one/multiple) could not chose from a list of objects (commit 347be5ae) null and other falsy values should not be rendered in the view (issue #242) Docs rewrite of several major portions of angular.service., angular.Array., angular.Object.* docs added support for [sitemap]((http://docs.angularjs.org/sitemap.xml) to make the docs indexable by search crawlers transition of Developer Guide docs from the wiki into docs.angularjs.org lots of improvements related to formatting of the content of docs.anguarjs.org 0.9.9 time-shift (2011-01-13) Security Added a just in case security check for JSON parsing. (commit 5f080193) Completed security review with the Google Security Team. Performance $location and $cookies services are now lazily initialized to avoid the polling overhead when not needed. $location service now listens for onhashchange events (if supported by browser) instead of constant polling. (commit 16086aa3) input widgets known listens on keydown events instead of keyup which improves perceived performance (commit 47c454a3) angular boots significantly sooner by listening for DOMContentLoaded event instead of window.load when supported by browser (commit c79aba92) new service $updateView which may be used in favor of $root.$eval() to run a complete eval on the entire document. This service bulks and throttles DOM updates to improve performance. (commit 47c454a3) Docs Major improvements to the doc parser (commit 4f22d686) Docs now offline enabled (all dependencies are bundled in the tarball) (commit 4f5d5029) Added support for navigating the docs app with keyboard shortcuts (tab and ctrl+alt+s) Bugfixes angular.Object.equals now properly handless comparing an object with a null (commit b0be87f6) Several issues were addressed in the $location service (commit 23875cb3) angular.filter.date now properly handles some corner-cases (issue #159 - fix contributed by Vojta) Breaking changes API for accessing registered services — scope.$inject — was renamed to scope.$service. (commit b2631f61) Support for eager-published services was removed. This change was done to make explicit dependency declaration always required in order to allow making relatively expensive services lazily initialized (e.g. $cookie, $location), as well as remove 'magic' and reduce unnecessary scope namespace pollution. (commit 3ea5941f) Complete list of affected services: $location $route $cookies $window $document $exceptionHandler $invalidWidgets To temporarily preserve the 'eager-published' status for these services, you may use ng:init (e.g. ng:init="$location = $service('$location'), ...) in the view or more correctly create a service like this: angular.service('published-svc-shim', function($location, $route, $cookies, $window, $document, $exceptionHandler, $invalidWidgets) { this.$location = $location; this.$route = $route; this.$cookies = $cookies; this.$window = $window; this.$document = $document; this.$exceptionHandler = $exceptionHandler; this.$invalidWidgets = $invalidWidgets; }, {$inject: ['$location', '$route', '$cookies', '$window', '$document', '$exceptionHandler', '$invalidWidgets'], $eager: true}); In the light of the eager-published change, to complete the cleanup we renamed $creation property of services to $eager with its value being a boolean. To transition, please rename all $creation: 'eager' declarations to $eager: true. (commit 1430c6d6) angular.foreach was renamed to angular.forEach to make the api consistent. (commit 0a6cf70d) The toString method of the angular.service.$location service was removed. (commit 23875cb3) 0.9.8 astral-projection (2010-12-23) Docs/Getting started angular-seed project to get you hacking on an angular apps quickly https://github.com/angular/angular-seed Performance Delegate JSON parsing to native parser (JSON.parse) if available Bug Fixes Ignore input widgets which have no name (issue #153) 0.9.7 sonic-scream (2010-12-10) Bug Fixes $defer service should always call $eval on the root scope after a callback runs (issue #189) fix for failed assignments of form obj[0].name=value (issue #169) significant parser improvements that resulted in lower memory usage (commit 23fc73081feb640164615930b36ef185c23a3526) Docs small docs improvements (mainly docs for the $resource service) Breaking changes Angular expressions in the view used to support regular expressions. This feature was rarely used and added unnecessary complexity. It not a good idea to have regexps in the view anyway, so we removed this support. If you had any regexp in your views, you will have to move them to your controllers. (commit e5e69d9b90850eb653883f52c76e28dd870ee067) 0.9.6 night-vision (2010-12-06) Security several improvements in the HTML sanitizer code to prevent code execution via hrefs and other attributes. Commits: 41d5938883a3d06ffe8a88a51efd8d1896f7d747 2bbced212e2ee93948c45360fee00b2e3f960392 Docs set up http://docs.angularjs.org domain, the docs for the latest release will from now on be deployed here. docs app UI polishing with dual scrolling and other improvements Bug Fixes select widget now behaves correctly when its option items are created via ng:repeat (issue #170) fix for async xhr cache issue #152 by adding $browser.defer and $defer service Breaking Changes Fix for issue #152 might break some tests that were relying on the incorrect behavior. The breakage will usually affect code that tests resources, xhr or services/widgets build on top of these. All that is typically needed to resolve the issue is adding a call to $browser.defer.flush() in your test just before the point where you expect all cached resource/xhr requests to return any results. Please see 011fa39c2a0b5da843395b538fc4e52e5ade8287 for more info. The HTML sanitizer is slightly more strinct now. Please see info in the "Security" section above. 0.9.5 turkey-blast (2010-11-25) Docs 99% of the content from the angular wiki is now in the docs Api added angular.Array.limitTo to make it easy to select first or last few items of an array 0.9.4 total-recall (2010-11-18) Docs searchable docs UI improvements we now have ~85% of the wiki docs migrated to ng docs some but not all docs were updated along the way Api ng:include now supports onload attribute (commit cc749760) Misc Better error handling - compilation exception now contain stack trace (commit b2d63ac4) 0.9.3 cold-resistance (2010-11-10) Docs prettier docs app with syntax highlighting for examples, etc added documentation, examples and scenario tests for many more apis including: all directives all formatters all validators some widgets Api date filter now accepts strings that angular.String.toDate can convert to Date objects angular.String.toDate supports ISO8061 formated strings with all time fractions being optional ng:repeat now exposes $position with values set to 'first', 'middle' or 'last' ng:switch now supports ng:switch-default as fallback switch option Breaking changes we now support ISO 8601 extended format datetime strings (YYYY-MM-DDTHH:mm:ss.SSSZ) as defined in EcmaScript 5 throughout angular. This means that the following apis switched from YYYY-MM-DDTHH:mm:ssZ to YYYY-MM-DDTHH:mm:ss.SSSZ (note the added millis) when representing dates: angular.Date.toString angular.String.fromDate JSON serialization and deserialization (used by json filter, $xhr and $resource) removed SSN validator. It's unlikely that most people will need it and if they do, it can be added simple RegExp validator. 0.9.2 faunal-mimicry (2010-11-03) Docs created documentation framework based on jsdoc syntax (commit 659af29a) jsdoc parser template generator json generator angular doc viewer app scenario runner for all example code documentation for all angular filters (commits 1fe7e3a1 & 1ba8c2a33) docs example code scenario tests for example code Testability Scenario Runner binding DSL in Scenario can now match bindings without specifying filters dsl statements now accept a label argument to make test output more readable (issue #94) dsl element() statement now implements most of the jQuery API (issue #106) new browser() dsl statement for getting info about the emulated browser running the app (issue #109) scenario runner is now compatible with IE8 (issue #93) scenarior runner checks if URL would return a non-success status code (issue #100) binding() DSL now accepts regular expressions new textarea() scenario runner DSL for entering text into textareas Misc lots of small bugfixes Breaking changes Scenario Runner navigating to about:blank is no longer supported. It results in a sandbox error navigateTo() is now browser().navigateTo(). Old code must be updated file:// URLs are no longer supported for running a scenario. You must use a web server that implements HEAD 0.9.1 repulsion-field (2010-10-26) Security added html sanitizer to fix the last few known security issues (issues #33 and #34) API new ng:submit directive for creating onSubmit handlers on forms (issue #76) the date filter now accepts milliseconds as well as date strings (issue #78) the html filter now supports 'unsafe' option to bypass html sanitization Testability lots of improvements related to the scenario runner (commit 40d7e66f) Demo added a new demo application: Personal Log (src example/personalLog) Chores lots of fixes to get all tests pass on IE added TzDate type to allow us to create timezone idependent tests (issue #88) Breaking changes $cookieStore service is not globally published any more, if you use it, you must request it via $inject as any other non-global service html filter now sanitizes html content for XSS attacks which may result in different behavior 0.9.0 dragon-breath (2010-10-20) Security angular.fromJson not safer (issue #57) readString consumes invalid escapes (issue #56) use new Function instead of eval (issue #52) Speed css cleanup + inline all css and images in the main js (issue #64) Testability initial version of the built-in end-to-end scenario runner (issues #50, #67, #70) API allow ng:controller nesting (issue #39) new built-in date format filter (issue #45) $location needs method you call on updates (issue #32) Chores release versioning + file renaming (issue #69) Breaking changes $location.parse was replaced with $location.update all css and img files were inlined into the main js file, to support IE7 and older app must host angular-ie-compat.js file Big Thanks to Our Community Contributors Vojta Jina