Alan Agius 8446e46f8b refactor(platform-server): deprecate ServerXhr ...

XHR support in `@angular/platform-server` is deprecated because the underlying `xhr2` library does not safely handle redirects. Specifically, it can forward `Authorization` headers on cross-origin redirects (which leaks credentials) and is susceptible to denial-of-service (DoS) via redirect loops.

DEPRECATED: XHR support in `@angular/platform-server` is deprecated. Use standard `fetch` APIs instead.

2026-06-09 09:54:16 -07:00

..

init

build: consolidate domino bundling in platform-server

2026-03-25 13:31:05 -07:00

src

refactor(platform-server): deprecate ServerXhr

2026-06-09 09:54:16 -07:00

test

fix(platform-server): harden platform location origin validation during SSR (#69184)

2026-06-05 17:20:43 +00:00

testing

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

third_party/domino

build: consolidate domino bundling in platform-server

2026-03-25 13:31:05 -07:00

BUILD.bazel

build: cleanup workspace deps

2026-04-23 11:38:26 -07:00

index.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00

package.json

build: update minimum supported Node.js versions

2026-05-27 10:39:17 -07:00

PACKAGE.md

docs: drop glossary links (#55044)

2024-03-28 13:02:50 -07:00

public_api.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00