angular__angular

mirror of https://github.com/angular/angular.git synced 2026-09-14 13:54:52 +08:00

Files

T

Alan Agius 78fd159b78 fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

This commit implements a security fix to prevent XSS vulnerabilities where SVG animation elements (`<animate>`, `<set>`, etc.) could be used to modify the `href` or `xlink:href` attributes of other elements to `javascript:` URLs.

(cherry picked from commit 1c6b0704fb)

2025-12-01 10:27:00 +01:00

design

build: format md files

2025-11-06 10:07:13 -08:00

src

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:27:00 +01:00

test

fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs

2025-12-01 10:27:00 +01:00

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63383 )