Chad Bentz d1d9df7729 Address review: restrict @HostListener handler to window/document message targets ...

Drop the plain 'message' event name from the @HostListener matcher. The
postMessage 'message' event is dispatched on window and does not bubble, so an
element-level @HostListener('message') does not receive cross-window messages.
Keeping only 'window:message' and 'document:message' makes the model more
precise and matches the accompanying comment and change note.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-22 21:35:21 -04:00

..

examples

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

integration-tests

Merge branch 'main' into bazookamusic/cwe-1427

2026-06-11 12:05:57 +02:00

lib

Address review: restrict @HostListener handler to window/document message targets

2026-06-22 21:35:21 -04:00

src

Fix prompt injection severity

2026-06-17 12:52:33 +03:00

test

JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler

2026-06-22 21:21:15 -04:00