Sitelet https://github.com/angular/angular/compare/v20.3.17...v20.3.18
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: angular/angular
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v20.3.17
Choose a base ref
...
head repository: angular/angular
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v20.3.18
Choose a head ref
  • 4 commits
  • 8 files changed
  • 2 contributors

Commits on Mar 12, 2026

  1. fix(core): sanitize translated attribute bindings with interpolations 

    Fixes that we weren't sanitizing attribute bindings with interpolations if they're marked for translation, for example: `<a href="/sitelet?url=https%3A%2F%2Fgithub.com%2Fangular%2Fangular%2Fcompare%2F%257B%257BevilLink%257D%257D" i18n-href></a>`.

Also adds a bit more test coverage for our sanitization.
    @crisbeto @mattrbeck
    crisbeto authored and mattrbeck committed Mar 12, 2026
    Configuration menu
    Copy the full SHA
    72126f9 View commit details
    Browse the repository at this point in the history

  2. fix(core): sanitize translated form attributes 

    Fixes that we weren't sanitizing the `form` and `formaction` attributes when they're used together with translations.
    @crisbeto @mattrbeck
    crisbeto authored and mattrbeck committed Mar 12, 2026
    Configuration menu
    Copy the full SHA
    626bc8b View commit details
    Browse the repository at this point in the history

  3. fix(compiler): disallow translations of iframe src 

    Fixes that the compiler was allowing translations of `src` attributes in iframes which can be a security issue.
    @crisbeto @mattrbeck
    crisbeto authored and mattrbeck committed Mar 12, 2026
    Configuration menu
    Copy the full SHA
    02fbf08 View commit details
    Browse the repository at this point in the history

  4. release: cut the v20.3.18 release

    @mattrbeck
    mattrbeck committed Mar 12, 2026
    Configuration menu
    Copy the full SHA
    cef3164 View commit details
    Browse the repository at this point in the history
Loading