Alan Agius 0276479e7d fix(http): prevent XSRF token leakage to protocol-relative URLs ...

The XSRF interceptor previously failed to detect protocol-relative URLs (starting with `//`) as absolute URLs. This allowed requests to such URLs to include the XSRF token, potentially leaking it to external domains.

This change updates the interceptor to correctly identify protocol-relative URLs as absolute and exclude them from receiving the XSRF token.

2025-11-25 13:54:57 -05:00

..

http

fix(http): prevent XSRF token leakage to protocol-relative URLs

2025-11-25 13:54:57 -05:00

locales

build: format md files

2025-11-06 10:10:22 -08:00

src

docs: add reference to Built-in Pipes in multiple pipe files

2025-11-11 08:47:11 -08:00

test

fix(common): remove placeholder image listeners once view is removed

2025-11-10 12:05:23 -08:00

testing

build: format md files

2025-11-06 10:10:22 -08:00

upgrade

build: format md files

2025-11-06 10:10:22 -08:00

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63384)

2025-08-25 15:45:46 -07:00

index.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00

package.json

build: update common's locales to use rules_js (#61629)

2025-05-26 10:18:14 +00:00

PACKAGE.md

build: format md files

2025-11-06 10:10:22 -08:00

public_api.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00