Matthieu Riegler 37e8aadf87 fix(platform-server): prevent SSRF bypasses via backslash URLs in HttpClient ...

Encoding backslashes ensures that they are not normalized to slashes and where they could generate a protocol relative URL.

(cherry picked from commit 140c4d04cb)

2026-05-27 10:23:34 -07:00

..

BUILD.bazel

build: consolidate domino bundling in platform-server

2026-03-25 13:31:10 -07:00

dom_utils.ts

…

event_replay_spec.ts

fix(core): prevent event replay double-invocation when element hydrates before app stability

2026-04-28 00:07:40 +00:00

full_app_hydration_spec.ts

fix(core): respect ngSkipHydration on components with projectable nodes in LContainers

2026-04-29 23:09:18 +00:00

hydration_utils.ts

…

incremental_hydration_spec.ts

test(platform-server): fix race condition in incremental hydration test

2026-04-03 23:47:00 +00:00

integration_spec.ts

fix(platform-server): prevent SSRF bypasses via backslash URLs in HttpClient

2026-05-27 10:23:34 -07:00

platform_location_spec.ts

fix(platform-server): secure location and document initialization against SSRF and path hijack

2026-05-27 10:22:42 -07:00

render_spec.ts

…

transfer_state_spec.ts

fix(core): escape forward slashes in transfer state to prevent crawler indexing

2026-04-13 13:55:00 +03:00

url_spec.ts

fix(platform-server): secure location and document initialization against SSRF and path hijack

2026-05-27 10:22:42 -07:00

utils_spec.ts

fix(platform-server): secure location and document initialization against SSRF and path hijack

2026-05-27 10:22:42 -07:00