Alan Agius 1c6b0704fb fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs ...

This commit implements a security fix to prevent XSS vulnerabilities where SVG animation elements (`<animate>`, `<set>`, etc.) could be used to modify the `href` or `xlink:href` attributes of other elements to `javascript:` URLs.

2025-12-01 10:26:56 +01:00

..

animation

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

application

fix(core): use injected DOCUMENT for CSP_NONCE

2025-11-25 11:39:20 -05:00

authoring

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

change_detection

docs: Adds documentation for generic type argument to SimpleChanges

2025-11-19 14:31:53 -08:00

compiler

refactor(core): rename ExperimentalIsolatedShadowDom to IsolatedShadowDom

2025-11-11 08:46:06 -08:00

debug

…

defer

refactor(core): export profile event as enum and move profile_types.ts and framework to shared devtools folder

2025-11-19 15:22:49 -08:00

di

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

hydration

refactor: replace getDocument() with inject(DOCUMENT)

2025-11-25 13:04:58 -05:00

i18n

refactor(core): remove redundant providedIn: 'root' from injection tokens

2025-11-04 00:31:52 +00:00

interface

refactor(core): move interfaces around (#64535)

2025-10-20 17:49:39 +00:00

internal

…

linker

docs: improve core package API documentation with additional reference links

2025-11-25 10:19:36 -05:00

metadata

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

platform

refactor(core): Remove toggles used for zoneless by default migration

2025-11-24 16:57:49 -05:00

reflection

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

render

fix(core): prevent animations renderer from impacting animate.leave (#63921)

2025-09-19 21:26:18 +00:00

render3

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:26:56 +01:00

resource

refactor(core): add debug name to resource (#64172)

2025-11-24 11:30:12 -05:00

sanitization

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:26:56 +01:00

testability

fix(core): cleanup testability subscriptions (#61261)

2025-05-21 12:06:23 +00:00

util

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

view

…

zone

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

authoring.ts

…

cached_injector_service.ts

refactor(core): move interfaces around (#64535)

2025-10-20 17:49:39 +00:00

change_detection.ts

…

console.ts

refactor: remove unnecessary TSLint rule flags (#59365)

2025-01-07 16:06:21 +00:00

core_private_export.ts

refactor(router): Add handler to NavigationInterceptOptions

2025-11-07 13:32:49 -08:00

core_reactivity_export_internal.ts

refactor(core): expose isWritableSignal to the publicApi

2025-10-29 20:31:41 +00:00

core_reactivity_export.ts

…

core_render3_private_export.ts

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:26:56 +01:00

core.externs.js

…

core.ts

refactor(core): remove NgProbeToken class (#63279)

2025-08-20 16:21:38 +00:00

di.ts

…

document.ts

docs: add documentation for DOCUMENT injection token usage in SSR

2025-11-17 08:28:00 -08:00

error_details_base_url.ts

refactor(core): Error logs links point to the archived version of the docs (#63512)

2025-09-10 22:21:10 +00:00

error_handler.ts

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

errors.ts

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:26:56 +01:00

event_delegation_utils.ts

refactor(core): remove redundant providedIn: 'root' from injection tokens

2025-11-04 00:31:52 +00:00

event_emitter.ts

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

image_performance_warning.ts

refactor(core): move interfaces around (#64535)

2025-10-20 17:49:39 +00:00

linker.ts

…

metadata.ts

refactor(core): move interfaces around (#64535)

2025-10-20 17:49:39 +00:00

ng_reflect.ts

refactor(core): remove redundant providedIn: 'root' from injection tokens

2025-11-04 00:31:52 +00:00

pending_tasks_internal.ts

refactor(core): move interfaces around (#64535)

2025-10-20 17:49:39 +00:00

pending_tasks.ts

docs: Adds links to relevant guides for APIs in core package

2025-11-17 08:47:35 -08:00

profiler.ts

docs: update comment (#62482)

2025-07-07 16:52:15 +00:00

r3_symbols.ts

…

render.ts

feat(core): add event listener options to renderer (#59092)

2024-12-10 13:39:47 -08:00

transfer_state.ts

refactor: replace getDocument() with inject(DOCUMENT)

2025-11-25 13:04:58 -05:00

type_checking.ts

refactor(core): expose function to assert type of variables (#62648)

2025-07-16 12:40:25 +02:00

version.ts

refactor(core): mark VERSION as @__PURE__ for better tree-shaking (#63400)

2025-08-27 11:39:06 -07:00

zone.ts

…