note: no summary for this digest release
Digest releases are listed without a summary. The original release notes for this version are below.
release-notesgithub.com/angular/angular · 34 lines
- ### common
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/7f4ac78994bff1576ab33f3ce48f95c17f40b4d8) | add upper bounds for digitsInfo |
- | [](https://github.com/angular/angular/commit/300f61feb3a534bfddf16fcbd240f97b32249699) | sanitize placeholder |
- ### compiler
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/0b07f47bd6598ae6bd5b75a375e2c817a3c0f243) | normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925) |
- | [](https://github.com/angular/angular/commit/eb1cbbf2eb5833219a367a61c04eb07aaa36cc29) | prevent namespaced SVG <style> elements from being stripped |
- | [](https://github.com/angular/angular/commit/cc1378d54bd93f3882d732261be8e66720eb71b2) | sanitize dynamic href and xlink:href bindings on SVG a elements (#68925) |
- | [](https://github.com/angular/angular/commit/782e01594e2ad9134c7385dcf3b518101b23ccab) | strip namespaced SVG script elements during template compilation (#68925) |
- ### core
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/ff12fe55ace5e861ba261afb4c0480ff3c40a192) | normalize tag names in runtime i18n attribute security context lookup (#68925) |
- | [](https://github.com/angular/angular/commit/e6fe77cc97fd10351687416f938bf754aff4eb9f) | sanitize meta selectors |
- | [](https://github.com/angular/angular/commit/daaf32937fd5c46e411b26f7c082613716fe9550) | support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925) |
- | [](https://github.com/angular/angular/commit/dada86e43d847204f714d1a933084617ab941c0a) | synchronize core sanitization schema with compiler (#68925) |
- ### http
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/582a417bd27fdaf989e5065dbcdf1ad752faf70c) | exclude withCredentials requests from transfer cache |
- | [](https://github.com/angular/angular/commit/5c6d6df34bbeff3ce98f3b35875444f925cc8f51) | skip TransferCache for cookie-bearing requests by default |
- ### platform-server
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/37e8aadf87b4facfcaf002a1557f8c393a362d97) | prevent SSRF bypasses via backslash URLs in HttpClient |
- | [](https://github.com/angular/angular/commit/72696e244ed7646cca9ab9afc7769a2163943bda) | secure location and document initialization against SSRF and path hijack |
- ### service-worker
- | Commit | Description |
- | -- | -- |
- | [](https://github.com/angular/angular/commit/b8bd49341ddcee10d119a9d4aa8e5736e4e5da53) | Preserves explicit 'credentials: omit' in asset requests |
- | [](https://github.com/angular/angular/commit/ca32fc10001301e6174804f9abcfba62252334f4) | Preserves HTTP cache mode in asset group requests |