compiler
| Commit | Description |
|---|---|
prevent XSS via SVG animation attributeName and MathML/SVG URLs
|
compiler-cli
| Commit | Description |
|---|---|
| avoid allocating an object for signals in production mode | |
| check that field radio button values are strings |
core
| Commit | Description |
|---|---|
| run animation queue in environment injector context | |
| unable to inject viewProviders when host directive with providers is present | |
tree shake unused dynamic [field] binding instructions (#65599)
|
forms
| Commit | Description |
|---|---|
Allows transforms on FormUiControl signals
| |
support dynamic [field] bindings (#65599)
|
http
| Commit | Description |
|---|---|
| enable XSRF protection for same-origin absolute URLs |
router
| Commit | Description |
|---|---|
| handle errors from view transition finished promise |