Alan Agius 0276479e7d fix(http): prevent XSRF token leakage to protocol-relative URLs ... The XSRF interceptor previously failed to detect protocol-relative URLs (starting with `//`) as absolute URLs. This allowed requests to such URLs to include the XSRF token, potentially leaking it to external domains. This change updates the interceptor to correctly identify protocol-relative URLs as absolute and exclude them from receiving the XSRF token.		2025-11-25 13:54:57 -05:00
..
BUILD.bazel	refactor: remove TODOs which have been corrected (#63421)	2025-08-27 11:23:57 -07:00
client_spec.ts	fix(http): add missing http options allowed in fetch API (#62881)	2025-07-30 14:07:41 +00:00
context_spec.ts	refactor: update license text to point to angular.dev (#57901)	2024-09-24 15:33:00 +02:00
fetch_spec.ts	fix(http): propagate plain errors when parsing fails (#62765)	2025-07-24 09:23:24 +00:00
headers_spec.ts	refactor(common): convert scripts within packages/common to relative imports (#60623)	2025-04-01 15:58:51 +00:00
jsonp_mock.ts	refactor(core): remove TODOs referencing #24571 (#60648)	2025-03-31 20:24:29 +00:00
jsonp_spec.ts	refactor(common): convert scripts within packages/common to relative imports (#60623)	2025-04-01 15:58:51 +00:00
module_spec.ts	refactor(common): convert scripts within packages/common to relative imports (#60623)	2025-04-01 15:58:51 +00:00
params_spec.ts	refactor(common): convert scripts within packages/common to relative imports (#60623)	2025-04-01 15:58:51 +00:00
provider_spec.ts	refactor(common): use ngServerMode in HttpInterceptorHandler (#61605)	2025-06-04 14:13:15 -04:00
request_spec.ts	feat(http): Add support for fetch referrer & integrity options in HttpClient (#62417)	2025-07-03 08:07:36 +00:00
resource_spec.ts	fix(core): fix narrowing of Resource.hasValue() (#63994)	2025-09-23 14:20:55 +00:00
response_spec.ts	refactor(http): rework the HttpEvent union to improve narrowing. (#63267)	2025-08-27 11:25:02 -07:00
transfer_cache_spec.ts	refactor: remove TODOs which have been corrected (#63421)	2025-08-27 11:23:57 -07:00
xhr_mock.ts	feat(http): Add timeout option to HTTP requests (#57194)	2025-06-27 09:56:25 +00:00
xhr_spec.ts	feat(http): Add timeout option to HTTP requests (#57194)	2025-06-27 09:56:25 +00:00
xsrf_spec.ts	fix(http): prevent XSRF token leakage to protocol-relative URLs	2025-11-25 13:54:57 -05:00