Alan Agius cf9d7fa0f8 fix(platform-server): harden platform location origin validation during SSR (#69184) ...

Add allowOriginChange option to ResolveUrlOptions in resolveUrl to enforce same-origin validation on resolved URLs. When set to false, it prevents any cross-origin changes (including HTTP/HTTPS URLs), aligning the emulated server-side platform location environment with browser security behavior.

Refactor ServerPlatformLocation.replaceState to use allowOriginChange: false instead of manual comparison, hardening state change validation against cross-origin URLs.

Add unit tests in url_spec.ts and platform_location_spec.ts for the origin validation changes.

PR Close #69184

2026-06-05 17:20:43 +00:00

..

BUILD.bazel

build: consolidate domino bundling in platform-server

2026-03-25 13:31:05 -07:00

dom_utils.ts

fix(core): Ensure application remains unstable during bootstrap (#62631)

2025-07-15 07:52:36 -07:00

event_replay_spec.ts

fix(core): prevent event replay double-invocation when element hydrates before app stability

2026-04-27 17:07:36 -07:00

full_app_hydration_spec.ts

fix(core): respect ngSkipHydration on components with projectable nodes in LContainers

2026-04-29 16:09:14 -07:00

hydration_utils.ts

feat(core): introduce BootstrapContext for improved server bootstrapping (#63562)

2025-09-09 10:57:09 -07:00

incremental_hydration_spec.ts

refactor(core): Makes @defer(hydrate ...) runtime tree-shakable

2026-05-01 15:54:55 -07:00

integration_spec.ts

refactor(platform-server): replace standard Error with RuntimeError (#69184)

2026-06-05 17:20:43 +00:00

platform_location_spec.ts

fix(platform-server): harden platform location origin validation during SSR (#69184)

2026-06-05 17:20:43 +00:00

render_spec.ts

refactor: clean up explicit standalone flags from tests (#63963)

2025-09-22 14:27:34 +00:00

transfer_state_spec.ts

fix(core): escape forward slashes in transfer state to prevent crawler indexing

2026-04-13 13:54:55 +03:00

url_spec.ts

fix(platform-server): harden platform location origin validation during SSR (#69184)

2026-06-05 17:20:43 +00:00

utils_spec.ts

refactor(platform-server): clean up and simplify url resolution utility

2026-05-29 13:14:07 +02:00