●Change8

v22.0.0-next.6

📦 angularView on GitHub →
✨ 1 features🐛 7 fixes🔧 5 symbols

Summary

This release focuses on security fixes related to SVG attribute binding and URL contexts, alongside an update to enforce strict templates during migrations.

Migration Steps

  1. The `ng update` schematic will now add `strictTemplates: true` to your tsconfig files.

✨ New Features

  • Add strictTemplates to tsconfig during ng update.

🐛 Bug Fixes

  • Register SVG animation attributes in URL security context.
  • Prevent binding unsafe attributes on SVG animation elements.
  • Resolve component import by exact specifier in route lazy-loading schematic.
  • Treat `object[data]` as resource URL context.
  • Validate locale in getOutputPathFn to prevent path traversal.
  • Pass outlet context to split to fix empty path named outlets.
  • Prevent recursive scope checks for invalid NgModule imports.

Affected Symbols

compilercompiler-clicorelocalizerouter