Alan Agius 13fb0afe93 refactor(platform-server): deprecate ServerXhr (#69255) ...

XHR support in `@angular/platform-server` is deprecated because the underlying `xhr2` library does not safely handle redirects. Specifically, it can forward `Authorization` headers on cross-origin redirects (which leaks credentials) and is susceptible to denial-of-service (DoS) via redirect loops.

DEPRECATED: XHR support in `@angular/platform-server` is deprecated. Use standard `fetch` APIs instead.

2026-06-09 10:06:45 -07:00

..

init

build: consolidate domino bundling in platform-server

2026-03-25 13:31:10 -07:00

src

refactor(platform-server): deprecate ServerXhr (#69255)

2026-06-09 10:06:45 -07:00

test

fix(platform-server): harden platform location origin validation during SSR

2026-06-05 10:46:12 -07:00

testing

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

third_party/domino

build: consolidate domino bundling in platform-server

2026-03-25 13:31:10 -07:00

BUILD.bazel

build: consolidate domino bundling in platform-server

2026-03-25 13:31:10 -07:00

index.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00

package.json

fix(core): update min Node.js support to 20.19, 22.12, and 24.0 (#61499)

2025-05-20 14:15:13 +00:00

PACKAGE.md

docs: drop glossary links (#55044)

2024-03-28 13:02:50 -07:00

public_api.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00