Sitelet https://github.com/angular/angular/compare/20.3.13...20.3.14
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: angular/angular
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 20.3.13
Choose a base ref
...
head repository: angular/angular
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 20.3.14
Choose a head ref
  • 2 commits
  • 4 files changed
  • 2 contributors

Commits on Nov 25, 2025

  1. fix(http): prevent XSRF token leakage to protocol-relative URLs 

    The XSRF interceptor previously failed to detect protocol-relative URLs (starting with `//`) as absolute URLs. This allowed requests to such URLs to include the XSRF token, potentially leaking it to external domains.

This change updates the interceptor to correctly identify protocol-relative URLs as absolute and exclude them from receiving the XSRF token.
    @alan-agius4 @kirjs
    alan-agius4 authored and kirjs committed Nov 25, 2025
    2 Configuration menu
    Copy the full SHA
    0276479 View commit details
    Browse the repository at this point in the history

  2. release: cut the v20.3.14 release

    @kirjs
    kirjs committed Nov 25, 2025
    Configuration menu
    Copy the full SHA
    136e923 View commit details
    Browse the repository at this point in the history
Loading