Kristiyan Kostadinov
|
49e17ba5cd
|
81385ea release: cut the v21.2.23 release
21.2.23+sha-81385ea
|
2026-09-09 20:03:01 +00:00 |
|
Kristiyan Kostadinov
|
0f318857d5
|
fc2e8fb fix(platform-server): update domino to latest version
21.2.22+sha-fc2e8fb
|
2026-09-09 14:36:14 +00:00 |
|
Leon Senft
|
406670bce2
|
4c0bc43 release: cut the v21.2.22 release
21.2.22+sha-4c0bc43
|
2026-08-26 23:58:48 +00:00 |
|
Leon Senft
|
fb0f4c3dbe
|
5aa6d97 fix(platform-server): avoid stripping unicode whitespace during url resolution
21.2.21+sha-5aa6d97
|
2026-08-25 17:15:23 +00:00 |
|
Jessica Janiuk
|
21d3f90977
|
992d627 release: cut the v21.2.21 release
21.2.21+sha-992d627
|
2026-08-19 20:00:52 +00:00 |
|
Jessica Janiuk
|
b4c8e280fe
|
c19a36c fix(platform-browser): disallow event handler attributes in Meta
21.2.20+sha-c19a36c
|
2026-08-17 20:53:34 +00:00 |
|
Alon Mishne
|
9da695fd06
|
dca0a77 release: cut the v21.2.20 release
21.2.20+sha-dca0a77
|
2026-08-13 00:14:05 +00:00 |
|
Jessica Janiuk
|
6ace8b7bbc
|
caf6166 fix(http): run root interceptors in the terminal request chain
21.2.19+sha-caf6166
|
2026-07-31 22:23:16 +00:00 |
|
GitHub
|
339800b973
|
6afe6fa fix(core): sanitize host bindings on concrete hosts
21.2.19+sha-6afe6fa
|
2026-07-30 15:36:57 +00:00 |
|
Alan Agius
|
e56a3d81e5
|
07cb840 release: cut the v21.2.19 release
21.2.19+sha-07cb840
|
2026-07-29 20:56:07 +00:00 |
|
Alex Rickabaugh
|
0325b214af
|
7b884f5 fix(compiler): restrict possible event handler check to property names longer than 2 characters
21.2.18+sha-7b884f5
|
2026-07-29 16:01:16 +00:00 |
|
GitHub
|
fd99af821f
|
9949dcc fix(http): enable xsrf for root-provided HttpClient
21.2.18+sha-9949dcc
|
2026-07-24 20:30:44 +00:00 |
|
Leon Senft
|
54a7d7f549
|
5d00aa2 release: cut the v21.2.18 release
21.2.18+sha-5d00aa2
|
2026-07-08 22:10:45 +00:00 |
|
Leon Senft
|
08ae036649
|
e86c31b fix(service-worker): preserve referrer policy in asset requests
21.2.17+sha-e86c31b
|
2026-07-08 18:35:35 +00:00 |
|
Leon Senft
|
a6106f5e82
|
91df739 fix(http): prevent caching of responses with Set-Cookie headers
21.2.17+sha-91df739
|
2026-07-07 17:22:05 +00:00 |
|
Leon Senft
|
6066b33690
|
8d22cc9 fix(compiler-cli): update babel dependencies to latest v7
21.2.17+sha-8d22cc9
|
2026-07-06 21:09:17 +00:00 |
|
Alex Rickabaugh
|
a4373800c1
|
5a693ba fix(core): reject dynamic script host elements
21.2.17+sha-5a693ba
|
2026-07-01 00:49:49 +00:00 |
|
Kirill Cherkashin
|
aca0d01fca
|
6bcce11 fix(core): avoid caching missing locale data
21.2.17+sha-6bcce11
|
2026-06-24 17:13:12 +00:00 |
|
Andrew Scott
|
49c85d1afe
|
31c25e2 release: cut the v21.2.17 release
21.2.17+sha-31c25e2
|
2026-06-10 20:02:04 +00:00 |
|
GitHub
|
e0ebe33add
|
88832c8 fix(core): validate lowercase SVG animation attribute names (#69269)
21.2.16+sha-88832c8
|
2026-06-10 16:58:02 +00:00 |
|
GitHub
|
72e88e5141
|
13fb0af refactor(platform-server): deprecate ServerXhr (#69255)
21.2.16+sha-13fb0af
|
2026-06-09 17:14:22 +00:00 |
|
Andrew Scott
|
c265aef0b5
|
86a56dc fix(common): Limits date format string length
21.2.16+sha-86a56dc
|
2026-06-08 20:31:37 +00:00 |
|
Andrew Scott
|
ace4e82457
|
b9d2938 fix(service-worker): Strips sensitive headers on cross-origin redirects
21.2.16+sha-b9d2938
|
2026-06-08 17:50:08 +00:00 |
|
GitHub
|
ed53845bd5
|
a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
21.2.16+sha-a810a31
|
2026-06-05 21:33:55 +00:00 |
|
Andrew Scott
|
20c292bfbf
|
3551074 fix(platform-server): harden platform location origin validation during SSR
21.2.16+sha-3551074
|
2026-06-05 17:59:12 +00:00 |
|
Andrew Scott
|
ffe34e9114
|
bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key generation
21.2.16+sha-bc55749
|
2026-06-05 16:56:30 +00:00 |
|
Andrew Scott
|
a23e1ecf87
|
d846326 fix(common): skip transfer cache for uncacheable HTTP traffic
21.2.16+sha-d846326
|
2026-06-04 22:34:36 +00:00 |
|
Andrew Scott
|
28f0e097a0
|
dc9c996 fix(compiler): sanitize two-way properties
21.2.16+sha-dc9c996
|
2026-06-03 20:16:58 +00:00 |
|
Andrew Scott
|
a83c561db7
|
1523061 fix(core): harden TransferState restoration against DOM clobbering
21.2.16+sha-1523061
|
2026-06-03 19:36:23 +00:00 |
|
Pawel Kozlowski
|
372788c064
|
03188dd release: cut the v21.2.16 release
21.2.16+sha-03188dd
|
2026-06-03 14:26:05 +00:00 |
|
Pawel Kozlowski
|
d6999ccde0
|
03188dd release: cut the v21.2.16 release
|
2026-06-03 12:39:28 +00:00 |
|
Pawel Kozlowski
|
175664ba1e
|
736c4ab refactor(core): fix broken unit test.
21.2.15+sha-736c4ab
|
2026-06-02 12:24:12 +00:00 |
|
Pawel Kozlowski
|
690c7ceeed
|
3fd6897 fix(core): harden inherit definition feature against polluted prototypes
21.2.15+sha-3fd6897
|
2026-06-02 11:38:53 +00:00 |
|
Pawel Kozlowski
|
6cccf82b46
|
db157e4 docs: fix min/max form template examples
21.2.15+sha-db157e4
|
2026-06-02 09:29:56 +00:00 |
|
Pawel Kozlowski
|
51188b580b
|
66821c4 fix(platform-server): throw on suspicious URLs and restrict protocol-relative URLs
21.2.15+sha-66821c4
|
2026-06-01 18:17:25 +00:00 |
|
Pawel Kozlowski
|
d3ba08e390
|
b74fb76 docs(docs-infra): simplify code block styles
21.2.15+sha-b74fb76
|
2026-06-01 16:43:28 +00:00 |
|
Pawel Kozlowski
|
5b15706178
|
ae1c8a1 fix(compiler): move projection attributes into constants
21.2.15+sha-ae1c8a1
|
2026-06-01 10:41:32 +00:00 |
|
Pawel Kozlowski
|
e3cbbcf022
|
9f6fda6 docs: fix esbuild and TensorFlow branding on overview page
21.2.15+sha-9f6fda6
|
2026-06-01 10:26:00 +00:00 |
|
Pawel Kozlowski
|
4d43a2f557
|
1cd4f54 fix(docs-infra): readable contrast for DEV/EXP api badges in light mode
21.2.15+sha-1cd4f54
|
2026-06-01 10:04:02 +00:00 |
|
Pawel Kozlowski
|
170a627307
|
69c0d48 fix(docs-infra): round up media queries
21.2.15+sha-69c0d48
|
2026-06-01 09:41:04 +00:00 |
|
Pawel Kozlowski
|
8effbc2dc2
|
7e38336 fix(core): use Object.create(null) for LOCALE_DATA as a hardening measure
21.2.15+sha-7e38336
|
2026-05-29 13:07:43 +00:00 |
|
Pawel Kozlowski
|
a452170cff
|
f6d8e64 fix(common): only strip a literal /index.html suffix from URLs
21.2.15+sha-f6d8e64
|
2026-05-29 11:27:21 +00:00 |
|
Pawel Kozlowski
|
c9ec811b82
|
9b7d0e5 docs: document i18n object forms for sourceLocale and locales in angular.json
21.2.15+sha-9b7d0e5
|
2026-05-29 10:00:38 +00:00 |
|
Alex Rickabaugh
|
770b180f87
|
cea6588 release: cut the v21.2.15 release
21.2.15+sha-cea6588
|
2026-05-28 17:01:07 +00:00 |
|
Pawel Kozlowski
|
16def84c2f
|
6b8202e refactor(docs-infra): extract magic 27 in navigation-list tooltip threshold
21.2.14+sha-6b8202e
|
2026-05-28 14:15:37 +00:00 |
|
Pawel Kozlowski
|
193660c1d0
|
eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
21.2.14+sha-eb1cbbf
|
2026-05-28 12:14:59 +00:00 |
|
Pawel Kozlowski
|
71f4119f24
|
8538bdc docs: fix grammar issues in resource guide
21.2.14+sha-8538bdc
|
2026-05-28 11:54:24 +00:00 |
|
Alex Rickabaugh
|
ae7d66d2a0
|
582a417 fix(http): exclude withCredentials requests from transfer cache
21.2.14+sha-582a417
|
2026-05-27 21:29:03 +00:00 |
|
Alex Rickabaugh
|
3c2cb52165
|
29ceeff docs: fix typos in source code comments
21.2.14+sha-29ceeff
|
2026-05-27 18:38:07 +00:00 |
|
Alex Rickabaugh
|
7e08445066
|
2b17b2d refactor(language-server): drop duplicate isAngularCore helpers in session
21.2.14+sha-2b17b2d
|
2026-05-27 18:06:13 +00:00 |
|