mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
78fd159b78
This commit implements a security fix to prevent XSS vulnerabilities where SVG animation elements (`<animate>`, `<set>`, etc.) could be used to modify the `href` or `xlink:href` attributes of other elements to `javascript:` URLs.
(cherry picked from commit 1c6b0704fb)