mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
Ensures that namespaced <script> elements (such as :svg:script) are correctly classified as PreparsedElementType.SCRIPT by the template preparser and stripped during compilation to prevent potential XSS vulnerabilities. Consequently, obsolete security schema mappings and runtime sanitization checks for <script> attributes have been removed since these elements are never present in compiled template outputs. |
||
|---|---|---|
| .. | ||
| dom_element_schema_registry.ts | ||
| dom_security_schema.ts | ||
| element_schema_registry.ts | ||
| trusted_types_sinks.ts | ||