Angular Security

Version: Angular 21 (2025) Tags: Security, XSS, CSRF, CSP, Sanitization

References: Security Guide • DomSanitizer

API Changes

This section documents recent version-specific API changes.

• NEW: Trusted Types — Angular supports Trusted Types for CSP

• NEW: HttpClient CSRF — Built-in CSRF protection with CookieXSRFStrategy

• NEW: provideZoneChangeDetection with untrustedEvents — Zone.js event filtering

• NEW: afterNextRender security — Run code safely after rendering