angular/packages/common/http/src
Alan Agius 40790ef980 fix(http): prevent XSRF token leakage to protocol-relative URLs
The XSRF interceptor previously failed to detect protocol-relative URLs (starting with `//`) as absolute URLs. This allowed requests to such URLs to include the XSRF token, potentially leaking it to external domains.

This change updates the interceptor to correctly identify protocol-relative URLs as absolute and exclude them from receiving the XSRF token.
2025-11-25 13:47:26 -05:00
..
backend.ts refactor(common): Removes unused imports to clean up dependencies 2025-11-06 08:35:28 -08:00
client.ts feat(http): add support for fetch referrerPolicy option in HttpClient (#64116) 2025-10-07 20:45:34 -04:00
context.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
errors.ts feat(http): add support for fetch referrerPolicy option in HttpClient (#64116) 2025-10-07 20:45:34 -04:00
fetch.ts refactor(http): simplifies destruction tracking using destroyed property 2025-11-05 17:05:24 +00:00
headers.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
interceptor.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
jsonp.ts refactor(common): convert scripts within packages/common to relative imports (#60623) 2025-04-01 15:58:51 +00:00
module.ts refactor: update license text to point to angular.dev (#57901) 2024-09-24 15:33:00 +02:00
params.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
private_export.ts refactor: update license text to point to angular.dev (#57901) 2024-09-24 15:33:00 +02:00
provider.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
request.ts feat(http): add support for fetch referrerPolicy option in HttpClient (#64116) 2025-10-07 20:45:34 -04:00
resource.ts refactor(core): add debug name to resource (#64172) 2025-11-24 11:30:12 -05:00
resource_api.ts refactor(core): add debug name to resource (#64172) 2025-11-24 11:30:12 -05:00
response.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
transfer_cache.ts docs: Adds guide links to HTTP API docs for better discoverability 2025-10-27 09:25:56 +01:00
xhr.ts refactor(http): add hooks for propagating traces across XHR callbacks. 2025-10-28 15:08:57 +01:00
xsrf.ts fix(http): prevent XSRF token leakage to protocol-relative URLs 2025-11-25 13:47:26 -05:00