mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
8446e46f8b
XHR support in `@angular/platform-server` is deprecated because the underlying `xhr2` library does not safely handle redirects. Specifically, it can forward `Authorization` headers on cross-origin redirects (which leaks credentials) and is susceptible to denial-of-service (DoS) via redirect loops. DEPRECATED: XHR support in `@angular/platform-server` is deprecated. Use standard `fetch` APIs instead.