Alan Agius 1c6b0704fb fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs ... This commit implements a security fix to prevent XSS vulnerabilities where SVG animation elements (`<animate>`, `<set>`, etc.) could be used to modify the `href` or `xlink:href` attributes of other elements to `javascript:` URLs.		2025-12-01 10:26:56 +01:00
..
animation	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
application	fix(core): use injected DOCUMENT for CSP_NONCE	2025-11-25 11:39:20 -05:00
authoring	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
change_detection	docs: Adds documentation for generic type argument to SimpleChanges	2025-11-19 14:31:53 -08:00
compiler	refactor(core): rename ExperimentalIsolatedShadowDom to IsolatedShadowDom	2025-11-11 08:46:06 -08:00
debug	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
defer	refactor(core): export profile event as enum and move profile_types.ts and framework to shared devtools folder	2025-11-19 15:22:49 -08:00
di	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
hydration	refactor: replace getDocument() with inject(DOCUMENT)	2025-11-25 13:04:58 -05:00
i18n	refactor(core): remove redundant providedIn: 'root' from injection tokens	2025-11-04 00:31:52 +00:00
interface	refactor(core): move interfaces around (#64535)	2025-10-20 17:49:39 +00:00
internal	refactor(core): account for anonymous classes in internal utility (#58392)	2024-10-28 12:38:03 -07:00
linker	docs: improve core package API documentation with additional reference links	2025-11-25 10:19:36 -05:00
metadata	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
platform	refactor(core): Remove toggles used for zoneless by default migration	2025-11-24 16:57:49 -05:00
reflection	build: rename defaults2.bzl to defaults.bzl (#63383)	2025-08-25 15:45:01 -07:00
render	fix(core): prevent animations renderer from impacting animate.leave (#63921)	2025-09-19 21:26:18 +00:00
render3	fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs	2025-12-01 10:26:56 +01:00
resource	refactor(core): add debug name to resource (#64172)	2025-11-24 11:30:12 -05:00
sanitization	fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs	2025-12-01 10:26:56 +01:00
testability	fix(core): cleanup testability subscriptions (#61261)	2025-05-21 12:06:23 +00:00
util	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
view	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
zone	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
authoring.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
cached_injector_service.ts	refactor(core): move interfaces around (#64535)	2025-10-20 17:49:39 +00:00
change_detection.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
console.ts	refactor: remove unnecessary TSLint rule flags (#59365)	2025-01-07 16:06:21 +00:00
core.externs.js	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
core.ts	refactor(core): remove NgProbeToken class (#63279)	2025-08-20 16:21:38 +00:00
core_private_export.ts	refactor(router): Add handler to NavigationInterceptOptions	2025-11-07 13:32:49 -08:00
core_reactivity_export.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
core_reactivity_export_internal.ts	refactor(core): expose isWritableSignal to the publicApi	2025-10-29 20:31:41 +00:00
core_render3_private_export.ts	fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs	2025-12-01 10:26:56 +01:00
di.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
document.ts	docs: add documentation for DOCUMENT injection token usage in SSR	2025-11-17 08:28:00 -08:00
error_details_base_url.ts	refactor(core): Error logs links point to the archived version of the docs (#63512)	2025-09-10 22:21:10 +00:00
error_handler.ts	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
errors.ts	fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs	2025-12-01 10:26:56 +01:00
event_delegation_utils.ts	refactor(core): remove redundant providedIn: 'root' from injection tokens	2025-11-04 00:31:52 +00:00
event_emitter.ts	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
image_performance_warning.ts	refactor(core): move interfaces around (#64535)	2025-10-20 17:49:39 +00:00
linker.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
metadata.ts	refactor(core): move interfaces around (#64535)	2025-10-20 17:49:39 +00:00
ng_reflect.ts	refactor(core): remove redundant providedIn: 'root' from injection tokens	2025-11-04 00:31:52 +00:00
pending_tasks.ts	docs: Adds links to relevant guides for APIs in core package	2025-11-17 08:47:35 -08:00
pending_tasks_internal.ts	refactor(core): move interfaces around (#64535)	2025-10-20 17:49:39 +00:00
profiler.ts	docs: update comment (#62482)	2025-07-07 16:52:15 +00:00
r3_symbols.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
render.ts	feat(core): add event listener options to renderer (#59092)	2024-12-10 13:39:47 -08:00
transfer_state.ts	refactor: replace getDocument() with inject(DOCUMENT)	2025-11-25 13:04:58 -05:00
type_checking.ts	refactor(core): expose function to assert type of variables (#62648)	2025-07-16 12:40:25 +02:00
version.ts	refactor(core): mark VERSION as @__PURE__ for better tree-shaking (#63400)	2025-08-27 11:39:06 -07:00
zone.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00