Changes in webui to comply with the safe html changes. Now that Nodes can be

lib/src/emitters.dart

 // Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 /** Collects several code emitters for the template tool. */
 library emitters;
 
 import 'package:csslib/parser.dart' as css;
 import 'package:csslib/visitor.dart';
 import 'package:html5lib/dom.dart';
@@ skipping 596 matching lines @@
             '\n</style>';
         var template = elemInfo.node;
         template.insertBefore(new Element.html(styleSheet),
             template.hasChildNodes() ? template.children[0] : null);
       }
 
       _context.statics.add('final', '__shadowTemplate',
           elemInfo.node.sourceSpan,
           "new autogenerated.DocumentFragment.html('''"
           "${escapeDartString(elemInfo.node.innerHtml, triple: true)}"
-          "''')");
+          "''', treeSanitizer: autogenerated.nullTreeSanitizer)");
       _context.printer.addLine(
           "__root.nodes.add(__shadowTemplate.clone(true));");
     }
 
     visit(elemInfo);
 
     bool hasExtends = info.extendsComponent != null;
     var codeInfo = info.userCode;
     var classDecl = info.classDeclaration;
     if (classDecl == null) return null;
@@ skipping 193 matching lines @@
 String _emitCreateHtml(Node node, Declarations statics) {
   if (node is Text) {
     return "new autogenerated.Text('${escapeDartString(node.value)}')";
   }
 
   // Namespace constants from:
   // http://dev.w3.org/html5/spec/namespaces.html#namespaces
   var isHtml = node.namespace == 'http://www.w3.org/1999/xhtml';
   var isSvg = node.namespace == 'http://www.w3.org/2000/svg';
   var isEmpty = node.attributes.length == 0 && node.nodes.length == 0;
+  var specialTags = const ['body', 'caption', 'col', 'colgroup', 'head',
+      'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'track'];
 
-  var constructor;
+  var expr;
   // Generate precise types like "new ButtonElement()" if we can.
   if (isEmpty && isHtml) {
-    constructor = htmlElementConstructors[node.tagName];
+    var constructor = htmlElementConstructors[node.tagName];
     if (constructor != null) {
-      constructor = '$constructor()';
+      expr = 'new autogenerated.$constructor()';
     } else {
-      constructor = "Element.tag('${node.tagName}')";
+      expr = "new autogenerated.Element.tag('${node.tagName}')";
     }
   } else if (isEmpty && isSvg) {
-    constructor = "_svg.SvgElement.tag('${node.tagName}')";
+    expr = "new autogenerated_svg.SvgElement.tag('${node.tagName}')";
+  } else if (isSvg || !specialTags.contains(node.tagName)) {
+    // TODO(sigmund): does this work for the mathml namespace?
+    var constructor = isSvg ? 'autogenerated_svg.SvgElement.svg'
+        : 'autogenerated.Element.html';
+    expr = "new $constructor("
+        "'${escapeDartString(node.outerHtml)}', "
+        "treeSanitizer: autogenerated.nullTreeSanitizer)";
   } else {
-    // TODO(sigmund): does this work for the mathml namespace?
-    var target = isSvg ? '_svg.SvgElement.svg' : 'Element.html';
-    constructor = "$target('${escapeDartString(node.outerHtml)}')";
+    expr = "autogenerated.createSafeNode('${node.tagName}',"
+        " ${_attributesAsString(node.attributes)},"
+        "'${escapeDartString(node.innerHtml)}')";
   }
-
-  var expr = 'new autogenerated.$constructor';
   var varName = '__html${statics.declarations.length}';
   statics.add('final', varName, node.sourceSpan, expr);
   return '${varName}.clone(true)';
 }
 
+String _attributesAsString(Map attributes) {
+  var sb = new StringBuffer();
+  sb.write('{');
+  bool first = true;
+  for (var key in attributes.keys) {
+    if (!first) sb.write(',');
+    first = false;
+    var sKey = escapeDartString(key);
+    var sValue = escapeDartString(attributes[key]);
+    sb.write("'$sKey': '$sValue'");
+  }
+  sb.write('}');
+  return sb.toString();
+}
+
 /** Trim down the html for the main html page. */
 void transformMainHtml(Document document, FileInfo fileInfo,
     PathMapper pathMapper, bool hasCss, bool rewriteUrls, Messages messages,
     String bootstrapOutName) {
   var filePath = fileInfo.inputUrl.resolvedPath;
 
   var dartLoaderTag = null;
   for (var tag in document.queryAll('script')) {
     var src = tag.attributes['src'];
     if (src != null && src.split('/').last == 'dart.js') {
@@ skipping 87 matching lines @@
   return """
 // Auto-generated from $filename.
 // DO NOT EDIT.
 $lib
 import 'dart:html' as autogenerated;
 import 'dart:svg' as autogenerated_svg;
 import 'package:web_ui/web_ui.dart' as autogenerated;
 import 'package:web_ui/observe/observable.dart' as __observe;
 """;
 }