All pull requests

Pull requests

• reject on* attributes on AMP elements in validateAttributeChange

  #40563·madib06ops opened Oct 16, 2026Contributor·

  ·

• 🐛 enforce https in requestForBatchFetch for SSR fetch paths

  #40562·mrdevel2002-ui opened Oct 14, 2026·

  ·

• 🐛 escape cta-image before interpolating into page-attachment style

  #40561·mrdevel2002-ui opened Oct 13, 2026·

  ·

• 🐛 fix substring cache-origin check in getTemplateProxyUrl_

  #40560·mrdevel2002-ui opened Oct 9, 2026·

  ·
  1

• ✨ [amp-analytics] Change Permutive vendor host to permutive.app

  #40557·AntonioGargaro opened Oct 2, 2026·

  ·
  1

  

• 📦 Update dependency moment to v2.31.0 [SECURITY]

  WG: componentsWG: performance
  #40556·renovate[bot] opened Sep 30, 2026Bot·1 task·

  ·

• 🐛 validate ad iframe source in adsense settings listener

  #40555·madib06ops opened Sep 29, 2026Contributor·

  ·

• 🐛 Fix global OOB read in IsUtf8WhiteSpaceChar

  #40554·PGZXB opened Sep 24, 2026·

  ·
  1

  1

• 📖 Document dark mode support for amp-img via media attribute

  #40550·raza2004 opened Aug 27, 2026·

  ·
  1

  1

• 🐛 clear window.opener on story ad attribution click

  #40549·madib06ops opened Aug 27, 2026Contributor·

  ·
  1

• Add CINIS_OWNER

  #40548·mikecomplexai-7 opened Aug 27, 2026·

  ·
  1

• 📦 Update dependency morgan to v1.11.0 [SECURITY]

  WG: infra
  #40547·renovate[bot] opened Aug 26, 2026Bot·1 task·

  ·

• 📦 Update dependency @babel/core to v7.29.6 [SECURITY]

  WG: infraWG: performance
  #40546·renovate[bot] opened Aug 26, 2026Bot·1 task·

  ·

• 📦 Update dependency postcss to v8.5.23 [SECURITY]

  WG: infra
  #40545·renovate[bot] opened Aug 26, 2026Bot·1 task·

  ·

• 📦 Update dependency esbuild to v0.28.1 [SECURITY]

  WG: infraWG: performance
  #40544·renovate[bot] opened Aug 26, 2026Bot·1 task·

  ·

• 🐛 escape verify-response field name in form verifier selector

  #40543·madib06ops opened Aug 26, 2026Contributor·

  ·

• 🐛 match textarea pattern polyfill against the whole value

  #40542·madib06ops opened Aug 24, 2026Contributor·

  ·

• ♻️ Consolidate external placeholder images to local examples/img (#25045)

  #40541·Rishi700252 opened Aug 23, 2026·

  ·
  2

• 🐛 purify item template output in bento-autocomplete

  #40540·madib06ops opened Aug 17, 2026Contributor·

  ·

• 🐛 Escape attribute values and text content in getHtml

  #40534·madib06ops opened Jul 18, 2026Contributor·

  ·
  1

• 🐛 Anchor ALLOWED_FONT_REGEX in a4a head validation

  #40530·madib06ops opened Jul 11, 2026Contributor·

  ·
  5

  

• feat(amp-youtube): add data-channelid to embed a channel's uploads

  #40529·mmustafasenoglu opened Jul 10, 2026·4 tasks done·

  ·
  1

  11

• 🐛 Fix cache-origin check bypass in amp-ad-template-helper

  #40524·madib06ops opened Jul 6, 2026Contributor·

  ·
  2

• 🐛 Prevent prototype pollution in amp-analytics mergeObjects

  #40522·madib06ops opened Jul 3, 2026Contributor·

  ·
  3

• fix redos in amp-a4a font allowlist version matching

  #40517·digi-scrypt opened Jun 5, 2026·

  ·
  1