FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[Backport 20.3.X] Http root interceptor ordering and preserve immutable clones by SkyZeroZx · Pull Request #70039 · angular/angular · GitHub

[Backport 20.3.X] Http root interceptor ordering and preserve immutable clones - #70039

Merged
thePunderWoman merged 3 commits into
angular:20.3.xfrom
SkyZeroZx:backport-69762-69778-to-20.3.x
Jul 31, 2026
Merged

[Backport 20.3.X] Http root interceptor ordering and preserve immutable clones#70039
thePunderWoman merged 3 commits into
angular:20.3.xfrom
SkyZeroZx:backport-69762-69778-to-20.3.x

Conversation

Copy link
Copy Markdown
Contributor

Backport of #69778 and #69762

Note : This seems similar to GHSA-q6f4-qqrg-jv6x

Prevent lazy HttpHeaders and HttpParams clones from reusing value arrays owned by a materialized source. Append and value-specific delete operations previously mutated those shared arrays, violating the immutable API contract and allowing request metadata to bleed into later requests.

Share value arrays until an update mutates a specific header or parameter, then copy only that array. Cover the affected append and delete paths with regression tests that materialize the source first.
Normalize value-specific HttpHeaders deletions before filtering. The string overload previously used String#indexOf and removed shorter values contained within the requested deletion value, potentially widening outgoing request metadata.

Preserve delete-all behavior only when no value is supplied, and cover string, array, and empty-string deletion.
Represent withRequestsMadeViaParent() with an internal delegating backend so the interceptor handler can distinguish delegated clients from independent child configurations.
pullapprove Bot requested a review from mmalerba July 31, 2026 16:08
angular-robot Bot added the area: common/http Issues related to HTTP and HTTP Client label Jul 31, 2026
ngbot Bot added this to the Backlog milestone Jul 31, 2026
JeanMeche removed the request for review from mmalerba July 31, 2026 21:20
JeanMeche added action: merge The PR is ready for merge by the caretaker target: lts This PR is targeting a version currently in long-term support labels Jul 31, 2026
thePunderWoman merged commit e4c416c into angular:20.3.x Jul 31, 2026
22 checks passed

Copy link
Copy Markdown
Contributor

This PR was merged into the repository. The changes were merged into the following branches:

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: common/http Issues related to HTTP and HTTP Client target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants


Back | FazBrowse Home | New Git URL