Thanks to visit codestin.com
Credit goes to github.com

Skip to content

fix(core): synchronize core sanitization schema with compiler - #68807

Closed
leonsenft wants to merge 2 commits into
angular:mainfrom
leonsenft:fix-ci
Closed

fix(core): synchronize core sanitization schema with compiler#68807
leonsenft wants to merge 2 commits into
angular:mainfrom
leonsenft:fix-ci

Conversation

@leonsenft

Copy link
Copy Markdown
Contributor

#68689 recently updated the compiler schema which should be kept in sync with the core schema. Fix applied by running pnpm bazel run //packages/core:dom_security_schema.

angular#68689 recently updated the compiler
schema which should be kept in sync with the core schema. Fix applied by
running `pnpm bazel run //packages/core:dom_security_schema`.
@leonsenft leonsenft added area: core Issues related to the framework runtime area: security Issues related to built-in security features, such as HTML sanitation labels May 19, 2026
@ngbot ngbot Bot modified the milestone: Backlog May 19, 2026

@josephperrott josephperrott left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Reviewed-for: fw-security

Removes the `should throw error on translated SVG script ResourceURL
attributes` integration test from `security_integration_spec.ts`.

This test is now obsolete because SVG `<script>` elements are stripped during
template compilation (implemented in 90494cd). As a result, they are no
longer present in the compiled template to trigger runtime sanitization,
causing this test (which expected a sanitization error to be thrown) to fail.
@leonsenft
leonsenft removed the request for review from alan-agius4 May 20, 2026 00:39
@pullapprove
pullapprove Bot requested a review from alan-agius4 May 20, 2026 00:39
@leonsenft leonsenft added target: patch This PR is targeted for the next patch release action: merge The PR is ready for merge by the caretaker target: rc This PR is targeted for the next release-candidate and removed target: patch This PR is targeted for the next patch release labels May 20, 2026
@leonsenft leonsenft mentioned this pull request May 20, 2026
@leonsenft

Copy link
Copy Markdown
Contributor Author

These were merged as d89b707 and 933608c.

@leonsenft leonsenft closed this May 20, 2026
@leonsenft
leonsenft deleted the fix-ci branch May 20, 2026 15:15
@angular-automatic-lock-bot

Copy link
Copy Markdown

This pull request has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot Bot locked and limited conversation to collaborators Jun 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

action: merge The PR is ready for merge by the caretaker area: core Issues related to the framework runtime area: security Issues related to built-in security features, such as HTML sanitation target: rc This PR is targeted for the next release-candidate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants