mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
768a349e6e
Reject non-script elements when reading the SSR transfer state payload by id. This prevents attacker-controlled elements with a clobbered id from spoofing hydration state.