All pull requests

Pull requests

• Reject ASCII control characters in trustedResourceUrl prefixes.

  #546·copybara-service[bot] opened Oct 11, 2026Bot·

  ·

• Refactor trustedResourceUrl format validation and export getFormatValidationError.

  #545·copybara-service[bot] opened Oct 10, 2026Bot·

  ·

• Add openWindowInNewTab(win, url, referrer) to safevalues/dom and mark the 2- and 3-argument overloads of windowOpen (which omit features) as @deprecated.

  #544·copybara-service[bot] opened Oct 6, 2026Bot·

  ·

• Add 'aria-describedby' and 'headers' to BaseSanitizerBuilder.allowIdReferenceAttributes().

  #540·copybara-service[bot] opened Sep 22, 2026Bot·

  ·

• Mark HtmlSanitizerBuilder and CssSanitizerBuilder @final and make sanitizerTable private.

  #539·copybara-service[bot] opened Sep 22, 2026Bot·

  ·

• Make BaseSanitizerBuilder.onlyAllowAttributes() order-independent with allow*Attributes().

  #538·copybara-service[bot] opened Sep 22, 2026Bot·

  ·

• Add HtmlSanitizerBuilder.allowNameAttributes().

  #537·copybara-service[bot] opened Sep 21, 2026Bot·

  ·

• No public description

  #530·copybara-service[bot] opened Dec 23, 2025Bot·

  ·

• Automated Code Change

  #524·copybara-service[bot] opened Dec 3, 2025Bot·

  ·

• Automated Code Change

  #523·copybara-service[bot] opened Dec 3, 2025Bot·

  ·

• Automated Code Change

  #522·copybara-service[bot] opened Dec 1, 2025Bot·

  ·

• Automated Code Change

  #521·copybara-service[bot] opened Nov 27, 2025Bot·

  ·

• Automated Code Change

  #520·copybara-service[bot] opened Nov 27, 2025Bot·

  ·

• Automated Code Change

  #519·copybara-service[bot] opened Nov 27, 2025Bot·

  ·

• Automated Code Change

  #518·copybara-service[bot] opened Nov 26, 2025Bot·

  ·

• No public description

  #516·copybara-service[bot] opened Nov 22, 2025Bot·

  ·

• No public description

  #510·copybara-service[bot] opened Jul 2, 2025Bot·

  ·

• No public description

  #509·copybara-service[bot] opened Jul 2, 2025Bot·

  ·

• Add SVG Use element href attribute

  #507·copybara-service[bot] opened Jul 1, 2025Bot·

  ·

• No public description

  #503·copybara-service[bot] opened Apr 16, 2025Bot·

  ·

• N/A only relevant for parent cl.

  #502·copybara-service[bot] opened Apr 10, 2025Bot·

  ·

• No public description

  #495·copybara-service[bot] opened Jan 20, 2025Bot·

  ·

• Define a workflow to release safevalues on NPM with build provenance.

  #489·copybara-service[bot] opened Dec 27, 2024Bot·

  ·

• Only accept a document in getStyleNonce and getScriptNonce

  #483·copybara-service[bot] opened Dec 20, 2024Bot·

  ·

• No public description

  #481·copybara-service[bot] opened Dec 19, 2024Bot·

  ·