SkyZeroZx ced0180b06 fix(core): reject dynamic script host elements ...

The previous fix for GHSA-692r-grfm-v8x7 was incomplete because it rejected script tags only when locating an explicit host element. Dynamic component instantiation can also infer the host element from the component selector.

Move the script-host rejection to the point where ComponentFactory has resolved the host element for either path, so createComponent rejects script hosts consistently.

(cherry picked from commit d7f70616a0)

2026-06-30 17:29:41 -07:00

..

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

bundle.golden_symbols.json

fix(core): reject dynamic script host elements

2026-06-30 17:29:41 -07:00

defer.component.ts

ci: reformat files

2025-12-16 14:44:19 -08:00

main.ts

refactor: clean up explicit standalone flags from tests (#63963)

2025-09-22 14:27:34 +00:00

treeshaking_spec.ts

build: migrate packages/core/test to new jasmine_test rule (#61902)

2025-06-12 10:00:09 +02:00