SkyZeroZx 8eb7aea08b fix(core): reject dynamic script host elements ...

The previous fix for GHSA-692r-grfm-v8x7 was incomplete because it rejected script tags only when locating an explicit host element. Dynamic component instantiation can also infer the host element from the component selector.

Move the script-host rejection to the point where ComponentFactory has resolved the host element for either path, so createComponent rejects script hosts consistently.

(cherry picked from commit 135f3755b4)

2026-06-30 17:42:07 -07:00

..

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63384)

2025-08-25 15:45:46 -07:00

bundle.golden_symbols.json

fix(core): reject dynamic script host elements

2026-06-30 17:42:07 -07:00

defer.component.ts

build: adjust bundling tests to use Angular CLI (#61566)

2025-05-29 14:39:11 -04:00

main.ts

build: adjust bundling tests to use Angular CLI (#61566)

2025-05-29 14:39:11 -04:00

treeshaking_spec.ts

build: migrate packages/core/test to new jasmine_test rule (#61902)

2025-06-12 10:00:09 +02:00