Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ng-zorro/ng-zorro-antd

              master @ f0dd94f
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Reflected XSS: 1 prior fix. Scrutinize any change in this area.

components/select/select-search.component.ts: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Reflected XSS: Direct assignment of user input to 'innerHTML' within the DOM mirroring logic of the select-search component allowed execution of arbitrary script. Safe rendering APIs must be used instead of raw DOM manipulation.

XSS: The use of static inline style attributes on elements (e.g., hidden upload inputs) required 'unsafe-inline' in Content Security Policy (CSP), exposing the application to broader XSS risks. Binding style properties dynamically via the Angular framework mitigates this.