 GitHub
|
fd99af821f
|
9949dcc fix(http): enable xsrf for root-provided HttpClient
21.2.18+sha-9949dcc
|
2026-07-24 20:30:44 +00:00 |
|
|
Leon Senft
|
54a7d7f549
|
5d00aa2 release: cut the v21.2.18 release
21.2.18+sha-5d00aa2
|
2026-07-08 22:10:45 +00:00 |
|
|
Leon Senft
|
08ae036649
|
e86c31b fix(service-worker): preserve referrer policy in asset requests
21.2.17+sha-e86c31b
|
2026-07-08 18:35:35 +00:00 |
|
|
Leon Senft
|
a6106f5e82
|
91df739 fix(http): prevent caching of responses with Set-Cookie headers
21.2.17+sha-91df739
|
2026-07-07 17:22:05 +00:00 |
|
|
Leon Senft
|
6066b33690
|
8d22cc9 fix(compiler-cli): update babel dependencies to latest v7
21.2.17+sha-8d22cc9
|
2026-07-06 21:09:17 +00:00 |
|
|
Alex Rickabaugh
|
a4373800c1
|
5a693ba fix(core): reject dynamic script host elements
21.2.17+sha-5a693ba
|
2026-07-01 00:49:49 +00:00 |
|
|
Kirill Cherkashin
|
aca0d01fca
|
6bcce11 fix(core): avoid caching missing locale data
21.2.17+sha-6bcce11
|
2026-06-24 17:13:12 +00:00 |
|
|
Andrew Scott
|
49c85d1afe
|
31c25e2 release: cut the v21.2.17 release
21.2.17+sha-31c25e2
|
2026-06-10 20:02:04 +00:00 |
|
|
GitHub
|
e0ebe33add
|
88832c8 fix(core): validate lowercase SVG animation attribute names (#69269)
21.2.16+sha-88832c8
|
2026-06-10 16:58:02 +00:00 |
|
|
GitHub
|
72e88e5141
|
13fb0af refactor(platform-server): deprecate ServerXhr (#69255)
21.2.16+sha-13fb0af
|
2026-06-09 17:14:22 +00:00 |
|
|
Andrew Scott
|
c265aef0b5
|
86a56dc fix(common): Limits date format string length
21.2.16+sha-86a56dc
|
2026-06-08 20:31:37 +00:00 |
|
|
Andrew Scott
|
ace4e82457
|
b9d2938 fix(service-worker): Strips sensitive headers on cross-origin redirects
21.2.16+sha-b9d2938
|
2026-06-08 17:50:08 +00:00 |
|
|
GitHub
|
ed53845bd5
|
a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
21.2.16+sha-a810a31
|
2026-06-05 21:33:55 +00:00 |
|
|
Andrew Scott
|
20c292bfbf
|
3551074 fix(platform-server): harden platform location origin validation during SSR
21.2.16+sha-3551074
|
2026-06-05 17:59:12 +00:00 |
|
|
Andrew Scott
|
ffe34e9114
|
bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key generation
21.2.16+sha-bc55749
|
2026-06-05 16:56:30 +00:00 |
|
|
Andrew Scott
|
a23e1ecf87
|
d846326 fix(common): skip transfer cache for uncacheable HTTP traffic
21.2.16+sha-d846326
|
2026-06-04 22:34:36 +00:00 |
|
|
Andrew Scott
|
28f0e097a0
|
dc9c996 fix(compiler): sanitize two-way properties
21.2.16+sha-dc9c996
|
2026-06-03 20:16:58 +00:00 |
|
|
Andrew Scott
|
a83c561db7
|
1523061 fix(core): harden TransferState restoration against DOM clobbering
21.2.16+sha-1523061
|
2026-06-03 19:36:23 +00:00 |
|
|
Pawel Kozlowski
|
372788c064
|
03188dd release: cut the v21.2.16 release
21.2.16+sha-03188dd
|
2026-06-03 14:26:05 +00:00 |
|
|
Pawel Kozlowski
|
d6999ccde0
|
03188dd release: cut the v21.2.16 release
|
2026-06-03 12:39:28 +00:00 |
|
|
Pawel Kozlowski
|
175664ba1e
|
736c4ab refactor(core): fix broken unit test.
21.2.15+sha-736c4ab
|
2026-06-02 12:24:12 +00:00 |
|
|
Pawel Kozlowski
|
690c7ceeed
|
3fd6897 fix(core): harden inherit definition feature against polluted prototypes
21.2.15+sha-3fd6897
|
2026-06-02 11:38:53 +00:00 |
|
|
Pawel Kozlowski
|
6cccf82b46
|
db157e4 docs: fix min/max form template examples
21.2.15+sha-db157e4
|
2026-06-02 09:29:56 +00:00 |
|
|
Pawel Kozlowski
|
51188b580b
|
66821c4 fix(platform-server): throw on suspicious URLs and restrict protocol-relative URLs
21.2.15+sha-66821c4
|
2026-06-01 18:17:25 +00:00 |
|
|
Pawel Kozlowski
|
d3ba08e390
|
b74fb76 docs(docs-infra): simplify code block styles
21.2.15+sha-b74fb76
|
2026-06-01 16:43:28 +00:00 |
|
|
Pawel Kozlowski
|
5b15706178
|
ae1c8a1 fix(compiler): move projection attributes into constants
21.2.15+sha-ae1c8a1
|
2026-06-01 10:41:32 +00:00 |
|
|
Pawel Kozlowski
|
e3cbbcf022
|
9f6fda6 docs: fix esbuild and TensorFlow branding on overview page
21.2.15+sha-9f6fda6
|
2026-06-01 10:26:00 +00:00 |
|
|
Pawel Kozlowski
|
4d43a2f557
|
1cd4f54 fix(docs-infra): readable contrast for DEV/EXP api badges in light mode
21.2.15+sha-1cd4f54
|
2026-06-01 10:04:02 +00:00 |
|
|
Pawel Kozlowski
|
170a627307
|
69c0d48 fix(docs-infra): round up media queries
21.2.15+sha-69c0d48
|
2026-06-01 09:41:04 +00:00 |
|
|
Pawel Kozlowski
|
8effbc2dc2
|
7e38336 fix(core): use Object.create(null) for LOCALE_DATA as a hardening measure
21.2.15+sha-7e38336
|
2026-05-29 13:07:43 +00:00 |
|
|
Pawel Kozlowski
|
a452170cff
|
f6d8e64 fix(common): only strip a literal /index.html suffix from URLs
21.2.15+sha-f6d8e64
|
2026-05-29 11:27:21 +00:00 |
|
|
Pawel Kozlowski
|
c9ec811b82
|
9b7d0e5 docs: document i18n object forms for sourceLocale and locales in angular.json
21.2.15+sha-9b7d0e5
|
2026-05-29 10:00:38 +00:00 |
|
|
Alex Rickabaugh
|
770b180f87
|
cea6588 release: cut the v21.2.15 release
21.2.15+sha-cea6588
|
2026-05-28 17:01:07 +00:00 |
|
|
Pawel Kozlowski
|
16def84c2f
|
6b8202e refactor(docs-infra): extract magic 27 in navigation-list tooltip threshold
21.2.14+sha-6b8202e
|
2026-05-28 14:15:37 +00:00 |
|
|
Pawel Kozlowski
|
193660c1d0
|
eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
21.2.14+sha-eb1cbbf
|
2026-05-28 12:14:59 +00:00 |
|
|
Pawel Kozlowski
|
71f4119f24
|
8538bdc docs: fix grammar issues in resource guide
21.2.14+sha-8538bdc
|
2026-05-28 11:54:24 +00:00 |
|
|
Alex Rickabaugh
|
ae7d66d2a0
|
582a417 fix(http): exclude withCredentials requests from transfer cache
21.2.14+sha-582a417
|
2026-05-27 21:29:03 +00:00 |
|
|
Alex Rickabaugh
|
3c2cb52165
|
29ceeff docs: fix typos in source code comments
21.2.14+sha-29ceeff
|
2026-05-27 18:38:07 +00:00 |
|
|
Alex Rickabaugh
|
7e08445066
|
2b17b2d refactor(language-server): drop duplicate isAngularCore helpers in session
21.2.14+sha-2b17b2d
|
2026-05-27 18:06:13 +00:00 |
|
|
Alex Rickabaugh
|
e7676646ce
|
37e8aad fix(platform-server): prevent SSRF bypasses via backslash URLs in HttpClient
21.2.14+sha-37e8aad
|
2026-05-27 17:39:58 +00:00 |
|
|
Alex Rickabaugh
|
2d593e9657
|
525e160 release: bump VSCode extension version to 21.2.4
21.2.14+sha-525e160
|
2026-05-22 21:32:34 +00:00 |
|
|
Alex Rickabaugh
|
a05ebcc8ac
|
4a41831 fix(vscode-extension): disable language server in untrusted workspaces
21.2.14+sha-4a41831
|
2026-05-22 20:15:24 +00:00 |
|
|
Alex Rickabaugh
|
5919755036
|
6d8b156 fix(vscode-extension): restrict jsdoc markdown trust and harden document opening
21.2.14+sha-6d8b156
|
2026-05-22 17:15:47 +00:00 |
|
|
Leon Senft
|
1d4eede89c
|
3fe8562 release: cut the v21.2.14 release
21.2.14+sha-3fe8562
|
2026-05-20 22:43:05 +00:00 |
|
|
leonsenft
|
269ff176e1
|
9627e02 docs: link to ng new reference from installation guide
21.2.13+sha-9627e02
|
2026-05-20 21:20:22 +00:00 |
|
|
leonsenft
|
5d28c4461c
|
1b6f780 docs: fix grammar slips on pipes guide
21.2.13+sha-1b6f780
|
2026-05-20 21:01:37 +00:00 |
|
|
leonsenft
|
070d3321f3
|
232b21d docs: document content projection limitations
21.2.13+sha-232b21d
|
2026-05-20 20:43:13 +00:00 |
|
|
leonsenft
|
267ec34e0b
|
1d6e71d docs: clarify ngDoCheck invocation behavior with OnPush strategy
21.2.13+sha-1d6e71d
|
2026-05-20 18:31:37 +00:00 |
|
|
leonsenft
|
3ec92d1b7b
|
0c7f70e fix(docs-infra): make absolute angular.dev hrefs relative in CLI option descriptions
21.2.13+sha-0c7f70e
|
2026-05-20 17:43:28 +00:00 |
|
|
leonsenft
|
69bf0d8f44
|
1ef4ea3 docs: update supported Angular versions table to reflect v19 end-of-life status
21.2.13+sha-1ef4ea3
|
2026-05-20 17:23:05 +00:00 |
|