angular/packages/core/src
JoostK 4f8eaac7ff fix(core): do not use Function constructors in development mode to avoid CSP violations (#43587)
This commit removes the dynamic creation of named arrays for internal
runtime storage arrays as they may cause CSP violations in development
mode,  when an application's CSP configuration does not include
`unsafe-eval`.

Named arrays for view data can still be enabled in development mode
using the `ngDevMode=namedConstructors` query parameter when loading the
application.

The usage of native class syntax for named arrays does not have the
desired effect when the code is downleveled to ES5. Since ES5 targets
are becoming increasingly more rare this is considered less of a problem
than the CSP violation.

Fixes #43494

PR Close #43587
2021-11-09 18:02:13 +00:00
..
change_detection perf(core): remove support for the deprecated WrappedValue (#43507) 2021-10-01 12:25:19 -04:00
compiler fix(core): handle invalid constructor parameters in partial factory declarations (#43619) 2021-10-01 12:24:31 -04:00
debug refactor(core): remove truthy check for classes getter (#44087) 2021-11-05 21:31:49 +00:00
di docs(core): apply minor improvements to the InjectionToken's api docs (#43693) 2021-10-13 16:46:26 +00:00
i18n build: update to cldr@39 (#43820) 2021-10-13 16:49:24 +00:00
interface build: Auto-gen tsec tsconfig files (#43440) 2021-09-17 17:17:34 +00:00
linker docs: update dynamic component guide to use factory-less ViewContainerRef.createComponent (#43895) 2021-10-29 15:39:04 -07:00
metadata feat(core): add getNgModuleById function to retrieve loaded NgModules by id (#43580) 2021-10-04 16:35:26 -07:00
reflection feat(core): support TypeScript 4.4 (#43281) 2021-09-23 14:49:19 -07:00
render refactor(core): clean up circular dependencies (#39722) 2020-11-18 09:15:29 -08:00
render3 fix(core): do not use Function constructors in development mode to avoid CSP violations (#43587) 2021-11-09 18:02:13 +00:00
sanitization refactor: add override keyword to members implementing abstract declarations (#42512) 2021-07-12 13:11:17 -07:00
testability docs: Remove references to protractor from documentation (#41731) 2021-05-03 14:26:09 -07:00
util build: Auto-gen tsec tsconfig files (#43440) 2021-09-17 17:17:34 +00:00
view perf(core): remove support for the deprecated WrappedValue (#43507) 2021-10-01 12:25:19 -04:00
zone fix(core): NgZone coaleascing options should trigger onStable correctly (#40540) 2021-02-22 10:01:31 -08:00
application_init.ts docs(core): initializeApp method should return function (#42743) 2021-07-08 14:50:18 -07:00
application_module.ts refactor: simplify the LOCALE_ID provider (#43913) 2021-10-28 11:19:12 -07:00
application_ref.ts docs: deprecate PlatformRef.bootstrapModuleFactory and factory-based signature of ApplicationRef.bootstrap (#43560) 2021-09-28 14:17:08 -07:00
application_tokens.ts docs: clean up api doc in core (#37053) 2020-06-30 12:11:15 -07:00
change_detection.ts perf(core): remove support for the deprecated WrappedValue (#43507) 2021-10-01 12:25:19 -04:00
codegen_private_exports.ts perf(core): remove support for the deprecated WrappedValue (#43507) 2021-10-01 12:25:19 -04:00
console.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
core.externs.js build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
core.ts feat(core): add createNgModuleRef function to create NgModuleRef based on NgModule class (#43580) 2021-10-04 16:35:27 -07:00
core_private_export.ts refactor(core): fix rollup bundle issues due to re-export conflicts (#43431) 2021-10-01 18:28:43 +00:00
core_render3_private_export.ts refactor(core): add ViewRef to private exports (#43978) 2021-10-29 15:45:49 -07:00
di.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
error_handler.ts fix(core): correctly handle null or undefined in ErrorHandler#handleError() (#42881) 2021-07-21 22:35:34 +00:00
errors.ts fix(core): correctly handle null or undefined in ErrorHandler#handleError() (#42881) 2021-07-21 22:35:34 +00:00
event_emitter.ts refactor(core): ensure compatibility with noImplicitOverride (#42512) 2021-07-12 13:11:15 -07:00
ivy_switch.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
linker.ts feat(core): add getNgModuleById function to retrieve loaded NgModules by id (#43580) 2021-10-04 16:35:26 -07:00
metadata.ts refactor(core): move injectAttributeImpl to avoid cycles (#37085) 2020-11-19 12:19:42 -08:00
platform_core_providers.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00
r3_symbols.ts refactor(core): rename ɵɵInjectableDef interface to ɵɵInjectableDeclaration (#41316) 2021-04-07 13:57:12 -07:00
render.ts refactor(core): clean up circular dependencies (#39722) 2020-11-18 09:15:29 -08:00
version.ts Revert "refactor(core): optimize calls to split and slice while computing version parts (#41208)" 2021-05-12 14:13:50 -04:00
zone.ts build: update license headers to reference Google LLC (#37205) 2020-05-26 14:26:58 -04:00