Function ɵɵvalidateAttribute

packages/core/src/sanitization/sanitization.ts:342–396

(value: T, tagName: string, attributeName: string)

 * @param attributeName The name of the attribute.
 */
export function ɵɵvalidateAttribute<T = any>(value: T, tagName: string, attributeName: string): T {
  const index = getSelectedIndex();
  const tNode: TNode | null = index === -1 ? null : getSelectedTNode();
  if (tNode && tNode.type !== TNodeType.Element) {
    return value;
  }

  const [namespace, resolvedTagName] = resolveElement(tagName);
  const securityContext = checkSecurityContext(resolvedTagName, attributeName, namespace);

  if (securityContext !== SecurityContext.ATTRIBUTE_NO_BINDING) {
    return value;
  }

  const lView = getLView();
  if (tNode) {
    if (resolvedTagName === 'iframe') {
      const element = getNativeByTNode(tNode, lView) as RElement;
      enforceIframeSecurity(element as HTMLIFrameElement);
    } else if (namespace === SVG_NAMESPACE) {
      const config =
        SVG_ANIMATION_SENSITIVE_STATIC_VALUES[resolvedTagName]?.[attributeName.toLowerCase()];
      if (config) {
        const element = getNativeByTNode(tNode, lView) as SVGAnimateElement;
        const attributeNameValue = getSecuritySensitiveSVGAnimationAttributeName(element, config);

        if (attributeNameValue) {
          const errorMessage =
            ngDevMode &&
            `Angular has detected that the \`${attributeName}\` was applied ` +
              `as a binding to the <${resolvedTagName}> element${getTemplateLocationDetails(lView)}. ` +
              `For security reasons, the \`${attributeName}\` can be set on the <${resolvedTagName}> element ` +
              `as a static attribute only when the "attributeName" is set to \'${attributeNameValue}\'. \n` +
              `To fix this, switch the \`${attributeNameValue}\` binding to a static attribute ` +
              `in a template or in host bindings section.`;

          throw new RuntimeError(RuntimeErrorCode.UNSAFE_ATTRIBUTE_BINDING, errorMessage);
        }

        return value;
      }
    }
  }

  const errorMessage =
    ngDevMode &&
    `Angular has detected that the \`${attributeName}\` was applied ` +
      `as a binding to the <${resolvedTagName}> element${tNode ? getTemplateLocationDetails(lView) : ''}. ` +
      `For security reasons, the \`${attributeName}\` can be set on the <${resolvedTagName}> element ` +
      `as a static attribute only. \n` +
      `To fix this, switch the \`${attributeName}\` binding to a static attribute ` +
      `in a template or in host bindings section.`;

  throw new RuntimeError(RuntimeErrorCode.UNSAFE_ATTRIBUTE_BINDING, errorMessage);
}

function getSecuritySensitiveSVGAnimationAttributeName(
  element: SVGAnimateElement,