DRAFT Auto csp build #1
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This commit relocates the DI tokens to a dedicated entry point. This change ensures that we do not depend on tree-shaking to eliminate server code from client bundles. Closes angular#28670
aaronshim
force-pushed
the
main
branch
2 times, most recently
from
3883482 to
a4b0928
Compare
aaronshim
force-pushed
the
auto-csp-build
branch
from
7c92fa8 to
79a696b
Compare
aaronshim
force-pushed
the
main
branch
2 times, most recently
from
4168106 to
5095deb
Compare
aaronshim
force-pushed
the
auto-csp-build
branch
from
79a696b to
c51bb6a
Compare
…d schematics BREAKING CHANGE: Protractor is no longer supported. Protractor was marked end-of-life in August 2023 (see https://protractortest.org/). Projects still relying on Protractor should consider migrating to another E2E testing framework, several support solid migration paths from Protractor. * https://angular.dev/tools/cli/end-to-end * https://blog.angular.dev/the-state-of-end-to-end-testing-with-angular-d175f751cb9c
…rivate-protractor`
aaronshim
force-pushed
the
auto-csp-build
branch
from
c51bb6a to
5d9b563
Compare
…e update functions The internal AOT Angular compilation processing can now generate the newly introduced template update functions during development server rebuilds of template only file changes. These template update functions are not yet used but provide the infrastructure to enable template hot replacement in a future change.
…ation. Auto-CSP is a feature to rewrite the `<script>` tags in a index.html file to either hash their contents or rewrite them as a dynamic loader script that can be hashed. These hashes will be placed in a CSP inside a `<meta>` tag inside the `<head>` of the document to ensure that the scripts running on the page are those known during the compile-time of the client-side rendered application.
Both of these versions are no longer supported by Angular and thus these workers are no longer required.
aaronshim
force-pushed
the
auto-csp-build
branch
2 times, most recently
from
fd9ac53 to
270adc0
Compare
Following up on the logic provided in angular#28639, we want to offer an opt-in option in angular.json to enable the auto-CSP transformation. For now, builds for `ng serve` will have Auto-CSP disabled.
aaronshim
force-pushed
the
auto-csp-build
branch
from
270adc0 to
18ccc2e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PR Checklist
Please check to confirm your PR fulfills the following requirements:
PR Type
What kind of change does this PR introduce?
What is the current behavior?
Issue Number: N/A
What is the new behavior?
Does this PR introduce a breaking change?
Other information