mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
7871093822
The `localize-translate` CLI tool uses the `locale` field from translation files to expand the `{{LOCALE}}` placeholder in the output directory. It failed to sanitize `locale` input, allowing malicious translations to write files outside of the configured output directory.
This change mitigates this issue by combining.
Closes #67906
|
||
|---|---|---|
| .. | ||
| init | ||
| schematics | ||
| src | ||
| test | ||
| tools | ||
| BUILD.bazel | ||
| index.ts | ||
| package.json | ||
| PACKAGE.md | ||
| private.ts | ||