@angular/platform-browser-dynamic
22.2.3 · 14 Oct 2026MIT4.2M / weekRepositoryHomepagenpmAtom feed
13.4.0 is the newest release of 13.x.
In short
1 breaking
- breaking
Existing iframe usages may have security-sensitive attributes applied as an attribute or property binding in a template or via host bindings in a directive. Such usages would require an update to ensure compliance with the new stricter rules around iframe bindings.
Release note
Breaking Changes
core
- breaking
Existing iframe usages may have security-sensitive attributes applied as an attribute or property binding in a template or via host bindings in a directive. Such usages would require an update to ensure compliance with the new stricter rules around iframe bindings.
core
| Commit | Description |
|---|---|
| fix - b1d7b79ff4 | hardening attribute and property binding rules for <iframe> elements (#48029) |
Special Thanks
Andrew Kushnir, Andrew Scott, George Looshch, Joey Perrott and Paul Gschwendtner