angular__angular

mirror of https://github.com/angular/angular.git synced 2026-09-14 13:54:52 +08:00

Files

T

Alan Agius 78fd159b78 fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

This commit implements a security fix to prevent XSS vulnerabilities where SVG animation elements (`<animate>`, `<set>`, etc.) could be used to modify the `href` or `xlink:href` attributes of other elements to `javascript:` URLs.

(cherry picked from commit 1c6b0704fb)

2025-12-01 10:27:00 +01:00

public-api

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:27:00 +01:00

vscode-extension

refactor: exclude tsconfig.json from VSIX package contents (#64991 )

2025-11-07 11:36:31 -08:00

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63383 )

2025-08-25 15:45:01 -07:00

README.md

build: format md files

2025-11-06 10:07:13 -08:00

README.md

`public-api/`

This directory contains all of the public api goldens for our npm packages we publish to NPM. These are tested on all PRs and commits as part of our bazel tests.

To check or update the public api goldens, run one of the following commands:

pnpm public-api:check
pnpm public-api:update