@angular/platform-browser-dynamic
22.2.3 · 14 Oct 2026MIT4.2M / weekRepositoryHomepagenpmAtom feed
Your version
In short
1 breaking
- breaking
Existing iframe usages may have security-sensitive attributes applied as an attribute or property binding in a template or via host bindings in a directive. Such usages would require an update to ensure compliance with the new stricter rules around iframe bindings.
Release note
Breaking Changes
core
- breaking
Existing iframe usages may have security-sensitive attributes applied as an attribute or property binding in a template or via host bindings in a directive. Such usages would require an update to ensure compliance with the new stricter rules around iframe bindings.
core
| Commit | Description |
|---|---|
| fix - b871db57da | hardening attribute and property binding rules for <iframe> elements |
Special Thanks
Andrew Kushnir, Joey Perrott and Paul Gschwendtner