XLTS for AngularJS v1.5.26 Released

v1.5.26

‍

Bug Fixes

• $compile:
  • improve performance of srcset attribute sanitization
  • improve performance of comment-based directive collection
• $injector: improve performance of implicit dependency annotation
• ‍linky: prevent ReDoS when searching for URLs in text
  
  • This fixes a Medium Severity ReDoS vulnerability (CVE-2025-4690)

‍

Notes

• Although some of the bug fixes in this release are not for exploitable vulnerabilities, we are making the changes out of an abundance of caution and to proactively avoid incorrect flagging in SAST scans.