core
| Commit | Description |
|---|---|
| disallow event attribute bindings in host bindings unconditionally (#68469) | |
| validate security-sensitive attributes in i18n bindings (#68469) |
platform-server
| Commit | Description |
|---|---|
add allowedHosts option to renderModule and renderApplication
| |
| ensure origin has a trailing slash when parsing url (#68469) |