SkyZeroZx d7f70616a0 fix(core): reject dynamic script host elements ...

The previous fix for GHSA-692r-grfm-v8x7 was incomplete because it rejected script tags only when locating an explicit host element. Dynamic component instantiation can also infer the host element from the component selector.

Move the script-host rejection to the point where ComponentFactory has resolved the host element for either path, so createComponent rejects script hosts consistently.

2026-06-30 17:29:36 -07:00

..

global

…

primitives

refactor(core): add childSignalProp to ReactiveNodeKind

2026-06-17 13:03:13 -07:00

resources

docs: add Signal Forms and v22 guidance to AI best-practices and llms.txt

2026-06-09 13:59:56 -07:00

rxjs-interop

fix(http): prevent httpResource from leaking a subscription

2026-05-27 13:06:47 -07:00

schematics

fix(core): improve input writes migration in best effort mode

2026-06-26 10:30:57 -07:00

src

fix(core): reject dynamic script host elements

2026-06-30 17:29:36 -07:00

test

fix(core): reject dynamic script host elements

2026-06-30 17:29:36 -07:00

testing

refactor(core): Don't throw when there are not async metadata

2026-04-27 17:04:09 -07:00

third_party/@mcp-b/webmcp-types

refactor(core): vendor @mcp-b/webmcp-types

2026-05-06 14:13:20 -07:00

BUILD.bazel

fix(core): support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation

2026-05-19 13:00:32 -07:00

index.ts

…

package.json

build: update dependency @mcp-b/webmcp-types to v3

2026-06-01 20:02:26 +02:00

PACKAGE.md

build: format md files

2025-11-06 10:03:05 -08:00

public_api.ts

…

tsconfig-build.json

…

tsconfig-test.json

…