187 Commits

Author SHA1 Message Date
Kristiyan Kostadinov 49e17ba5cd 81385ea release: cut the v21.2.23 release 21.2.23+sha-81385ea 2026-09-09 20:03:01 +00:00
Kristiyan Kostadinov 0f318857d5 fc2e8fb fix(platform-server): update domino to latest version 21.2.22+sha-fc2e8fb 2026-09-09 14:36:14 +00:00
Leon Senft 406670bce2 4c0bc43 release: cut the v21.2.22 release 21.2.22+sha-4c0bc43 2026-08-26 23:58:48 +00:00
Leon Senft fb0f4c3dbe 5aa6d97 fix(platform-server): avoid stripping unicode whitespace during url resolution 21.2.21+sha-5aa6d97 2026-08-25 17:15:23 +00:00
Jessica Janiuk 21d3f90977 992d627 release: cut the v21.2.21 release 21.2.21+sha-992d627 2026-08-19 20:00:52 +00:00
Jessica Janiuk b4c8e280fe c19a36c fix(platform-browser): disallow event handler attributes in Meta 21.2.20+sha-c19a36c 2026-08-17 20:53:34 +00:00
Alon Mishne 9da695fd06 dca0a77 release: cut the v21.2.20 release 21.2.20+sha-dca0a77 2026-08-13 00:14:05 +00:00
Jessica Janiuk 6ace8b7bbc caf6166 fix(http): run root interceptors in the terminal request chain 21.2.19+sha-caf6166 2026-07-31 22:23:16 +00:00
GitHub 339800b973 6afe6fa fix(core): sanitize host bindings on concrete hosts 21.2.19+sha-6afe6fa 2026-07-30 15:36:57 +00:00
Alan Agius e56a3d81e5 07cb840 release: cut the v21.2.19 release 21.2.19+sha-07cb840 2026-07-29 20:56:07 +00:00
Alex Rickabaugh 0325b214af 7b884f5 fix(compiler): restrict possible event handler check to property names longer than 2 characters 21.2.18+sha-7b884f5 2026-07-29 16:01:16 +00:00
GitHub fd99af821f 9949dcc fix(http): enable xsrf for root-provided HttpClient 21.2.18+sha-9949dcc 2026-07-24 20:30:44 +00:00
Leon Senft 54a7d7f549 5d00aa2 release: cut the v21.2.18 release 21.2.18+sha-5d00aa2 2026-07-08 22:10:45 +00:00
Leon Senft 08ae036649 e86c31b fix(service-worker): preserve referrer policy in asset requests 21.2.17+sha-e86c31b 2026-07-08 18:35:35 +00:00
Leon Senft a6106f5e82 91df739 fix(http): prevent caching of responses with Set-Cookie headers 21.2.17+sha-91df739 2026-07-07 17:22:05 +00:00
Leon Senft 6066b33690 8d22cc9 fix(compiler-cli): update babel dependencies to latest v7 21.2.17+sha-8d22cc9 2026-07-06 21:09:17 +00:00
Alex Rickabaugh a4373800c1 5a693ba fix(core): reject dynamic script host elements 21.2.17+sha-5a693ba 2026-07-01 00:49:49 +00:00
Kirill Cherkashin aca0d01fca 6bcce11 fix(core): avoid caching missing locale data 21.2.17+sha-6bcce11 2026-06-24 17:13:12 +00:00
Andrew Scott 49c85d1afe 31c25e2 release: cut the v21.2.17 release 21.2.17+sha-31c25e2 2026-06-10 20:02:04 +00:00
GitHub e0ebe33add 88832c8 fix(core): validate lowercase SVG animation attribute names (#69269) 21.2.16+sha-88832c8 2026-06-10 16:58:02 +00:00
GitHub 72e88e5141 13fb0af refactor(platform-server): deprecate ServerXhr (#69255) 21.2.16+sha-13fb0af 2026-06-09 17:14:22 +00:00
Andrew Scott c265aef0b5 86a56dc fix(common): Limits date format string length 21.2.16+sha-86a56dc 2026-06-08 20:31:37 +00:00
Andrew Scott ace4e82457 b9d2938 fix(service-worker): Strips sensitive headers on cross-origin redirects 21.2.16+sha-b9d2938 2026-06-08 17:50:08 +00:00
GitHub ed53845bd5 a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests 21.2.16+sha-a810a31 2026-06-05 21:33:55 +00:00
Andrew Scott 20c292bfbf 3551074 fix(platform-server): harden platform location origin validation during SSR 21.2.16+sha-3551074 2026-06-05 17:59:12 +00:00
Andrew Scott ffe34e9114 bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key generation 21.2.16+sha-bc55749 2026-06-05 16:56:30 +00:00
Andrew Scott a23e1ecf87 d846326 fix(common): skip transfer cache for uncacheable HTTP traffic 21.2.16+sha-d846326 2026-06-04 22:34:36 +00:00
Andrew Scott 28f0e097a0 dc9c996 fix(compiler): sanitize two-way properties 21.2.16+sha-dc9c996 2026-06-03 20:16:58 +00:00
Andrew Scott a83c561db7 1523061 fix(core): harden TransferState restoration against DOM clobbering 21.2.16+sha-1523061 2026-06-03 19:36:23 +00:00
Pawel Kozlowski 372788c064 03188dd release: cut the v21.2.16 release 21.2.16+sha-03188dd 2026-06-03 14:26:05 +00:00
Pawel Kozlowski d6999ccde0 03188dd release: cut the v21.2.16 release 2026-06-03 12:39:28 +00:00
Pawel Kozlowski 175664ba1e 736c4ab refactor(core): fix broken unit test. 21.2.15+sha-736c4ab 2026-06-02 12:24:12 +00:00
Pawel Kozlowski 690c7ceeed 3fd6897 fix(core): harden inherit definition feature against polluted prototypes 21.2.15+sha-3fd6897 2026-06-02 11:38:53 +00:00
Pawel Kozlowski 6cccf82b46 db157e4 docs: fix min/max form template examples 21.2.15+sha-db157e4 2026-06-02 09:29:56 +00:00
Pawel Kozlowski 51188b580b 66821c4 fix(platform-server): throw on suspicious URLs and restrict protocol-relative URLs 21.2.15+sha-66821c4 2026-06-01 18:17:25 +00:00
Pawel Kozlowski d3ba08e390 b74fb76 docs(docs-infra): simplify code block styles 21.2.15+sha-b74fb76 2026-06-01 16:43:28 +00:00
Pawel Kozlowski 5b15706178 ae1c8a1 fix(compiler): move projection attributes into constants 21.2.15+sha-ae1c8a1 2026-06-01 10:41:32 +00:00
Pawel Kozlowski e3cbbcf022 9f6fda6 docs: fix esbuild and TensorFlow branding on overview page 21.2.15+sha-9f6fda6 2026-06-01 10:26:00 +00:00
Pawel Kozlowski 4d43a2f557 1cd4f54 fix(docs-infra): readable contrast for DEV/EXP api badges in light mode 21.2.15+sha-1cd4f54 2026-06-01 10:04:02 +00:00
Pawel Kozlowski 170a627307 69c0d48 fix(docs-infra): round up media queries 21.2.15+sha-69c0d48 2026-06-01 09:41:04 +00:00
Pawel Kozlowski 8effbc2dc2 7e38336 fix(core): use Object.create(null) for LOCALE_DATA as a hardening measure 21.2.15+sha-7e38336 2026-05-29 13:07:43 +00:00
Pawel Kozlowski a452170cff f6d8e64 fix(common): only strip a literal /index.html suffix from URLs 21.2.15+sha-f6d8e64 2026-05-29 11:27:21 +00:00
Pawel Kozlowski c9ec811b82 9b7d0e5 docs: document i18n object forms for sourceLocale and locales in angular.json 21.2.15+sha-9b7d0e5 2026-05-29 10:00:38 +00:00
Alex Rickabaugh 770b180f87 cea6588 release: cut the v21.2.15 release 21.2.15+sha-cea6588 2026-05-28 17:01:07 +00:00
Pawel Kozlowski 16def84c2f 6b8202e refactor(docs-infra): extract magic 27 in navigation-list tooltip threshold 21.2.14+sha-6b8202e 2026-05-28 14:15:37 +00:00
Pawel Kozlowski 193660c1d0 eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped 21.2.14+sha-eb1cbbf 2026-05-28 12:14:59 +00:00
Pawel Kozlowski 71f4119f24 8538bdc docs: fix grammar issues in resource guide 21.2.14+sha-8538bdc 2026-05-28 11:54:24 +00:00
Alex Rickabaugh ae7d66d2a0 582a417 fix(http): exclude withCredentials requests from transfer cache 21.2.14+sha-582a417 2026-05-27 21:29:03 +00:00
Alex Rickabaugh 3c2cb52165 29ceeff docs: fix typos in source code comments 21.2.14+sha-29ceeff 2026-05-27 18:38:07 +00:00
Alex Rickabaugh 7e08445066 2b17b2d refactor(language-server): drop duplicate isAngularCore helpers in session 21.2.14+sha-2b17b2d 2026-05-27 18:06:13 +00:00