Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
angular-resource
Advanced tools
AngularJS module for interacting with RESTful server-side data sources
This repo is for distribution on npm
and bower
. The source for this module is in the
main AngularJS repo.
Please file issues and pull requests against that repo.
You can install this package either with npm
or with bower
.
npm install angular-resource
Then add ngResource
as a dependency for your app:
angular.module('myApp', [require('angular-resource')]);
bower install angular-resource
Add a <script>
to your index.html
:
<script src="/bower_components/angular-resource/angular-resource.js"></script>
Then add ngResource
as a dependency for your app:
angular.module('myApp', ['ngResource']);
Documentation is available on the AngularJS docs site.
The MIT License
Copyright (c) 2010-2015 Google, Inc. http://angularjs.org
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
1.5.0-rc.2 controller-requisition (2016-01-28)
ngTouch
module's ngClick
directive has been deprecated and disabled by default. See the breaking
changes section for more informationangular.lowercase
and angular.uppercase
functions have been deprecated and will be removed
in version 1.7.0. It is recommended to use String.prototype.toLowerCase and String.prototype.toUpperCase functions instead.$animate.pin()
host elements
(7700e2df,
#13783)usemap
as it can be used as a security exploit
(234053fc)$locale
(63492a02,
#13390)areAnimationsAllowed
check
(683bd92f)The $sanitize
service will now remove instances of the usemap
attribute from any elements passed
to it.
This attribute is used to reference another element by name
or id
. Since the name
and id
attributes are already blacklisted, a sanitized usemap
attribute could only reference unsanitized
content, which is a security risk.
The ngClick
override directive from the ngTouch
module is deprecated and disabled by default.
This means that on touch-based devices, users might now experience a 300ms delay before a click event is fired.
If you rely on this directive, you can still enable it with the $touchProvider.ngClickOverrideEnabled()
method:
angular.module('myApp').config(function($touchProvider) {
$touchProvider.ngClickOverrideEnabled(true);
});
Going forward, we recommend using FastClick or perhaps one of the Angular 3rd party touch-related modules that provide similar functionality.
Also note that modern browsers already remove the 300ms delay under some circumstances:
<meta name="viewport" content="width=device-width">
is settouch-action
css property is set to none
or manipulation
See this article by Telerik for more info on the topic.
Note that this change does not affect the ngSwipe
directive.
<a name="1.4.9"></a>
FAQs
AngularJS module for interacting with RESTful server-side data sources
The npm package angular-resource receives a total of 54,579 weekly downloads. As such, angular-resource popularity was classified as popular.
We found that angular-resource demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.