Alan Agius 7871093822 fix(localize): validate locale in getOutputPathFn to prevent path traversal ...

The `localize-translate` CLI tool uses the `locale` field from translation files to expand the `{{LOCALE}}` placeholder in the output directory. It failed to sanitize `locale` input, allowing malicious translations to write files outside of the configured output directory.

This change mitigates this issue by combining.

Closes #67906

2026-03-30 12:15:26 +02:00

..

init

build: remove API doc generation for localize/init and add mnemonic to API rendering rule.

2025-12-15 11:41:43 -08:00

schematics

fix(localize): add support for unit-test builder in ng-add schematic

2026-01-29 12:17:15 -08:00

src

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

test

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

tools

fix(localize): validate locale in getOutputPathFn to prevent path traversal

2026-03-30 12:15:26 +02:00

BUILD.bazel

build: rename defaults2.bzl to defaults.bzl (#63383)

2025-08-25 15:45:01 -07:00

index.ts

feat(bazel): support bundling .d.ts with code splitting (#60321)

2025-03-11 13:03:08 -07:00

package.json

build: update minimum supported Node.js versions

2026-02-25 07:57:18 -08:00

PACKAGE.md

ci: reformat files

2025-12-16 14:44:19 -08:00

private.ts

refactor: update license text to point to angular.dev (#57901)

2024-09-24 15:33:00 +02:00