Alan Agius ed48ca7f51 fix(platform-server): harden platform location origin validation during SSR ...

Add allowOriginChange option to ResolveUrlOptions in resolveUrl to enforce same-origin validation on resolved URLs. When set to false, it prevents any cross-origin changes (including HTTP/HTTPS URLs), aligning the emulated server-side platform location environment with browser security behavior.

Refactor ServerPlatformLocation.replaceState to use allowOriginChange: false instead of manual comparison, hardening state change validation against cross-origin URLs.

Add unit tests in url_spec.ts and platform_location_spec.ts for the origin validation changes.

2026-06-05 10:44:20 -07:00

..

BUILD.bazel

build: consolidate domino bundling in platform-server

2026-03-25 13:31:05 -07:00

dom_utils.ts

…

event_replay_spec.ts

fix(core): prevent event replay double-invocation when element hydrates before app stability

2026-04-27 17:07:36 -07:00

full_app_hydration_spec.ts

fix(core): respect ngSkipHydration on components with projectable nodes in LContainers

2026-04-29 16:09:14 -07:00

hydration_utils.ts

…

incremental_hydration_spec.ts

refactor(core): Makes @defer(hydrate ...) runtime tree-shakable

2026-05-01 15:54:55 -07:00

integration_spec.ts

refactor(platform-server): replace standard Error with RuntimeError

2026-06-05 10:44:20 -07:00

platform_location_spec.ts

fix(platform-server): harden platform location origin validation during SSR

2026-06-05 10:44:20 -07:00

render_spec.ts

…

transfer_state_spec.ts

fix(core): escape forward slashes in transfer state to prevent crawler indexing

2026-04-13 13:54:55 +03:00

url_spec.ts

fix(platform-server): harden platform location origin validation during SSR

2026-06-05 10:44:20 -07:00

utils_spec.ts

refactor(platform-server): clean up and simplify url resolution utility

2026-05-29 13:14:15 +02:00