angular · alan-agius4 · May 18, 2026 · May 19, 2026 · May 19, 2026 · May 20, 2026
diff --git a/goldens/public-api/core/index.api.md b/goldens/public-api/core/index.api.md
@@ -1706,6 +1706,8 @@ export interface SchemaMetadata {

 // @public
 export enum SecurityContext {
+    // (undocumented)
+    ATTRIBUTE_NO_BINDING = 6,
    // (undocumented)
    HTML = 1,
    // (undocumented)

diff --git a/integration/cli-hello-world-ivy-i18n/size.json b/integration/cli-hello-world-ivy-i18n/size.json
@@ -1,4 +1,4 @@
 {
-  "dist/main.js": 135813,
+  "dist/main.js": 144843,
  "dist/polyfills.js": 35883
 }
diff --git a/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts b/packages/compiler-cli/test/ngtsc/ngtsc_spec.ts
@@ -8432,9 +8432,6 @@ runInEachFileSystem((os: string) => {
          @HostBinding('attr.action')
          attrAction: string;

-          @HostBinding('attr.profile')
-          attrProfile: string;
-
          @HostBinding('attr.innerHTML')
          attrInnerHTML: string;

@@ -8461,10 +8458,10 @@ runInEachFileSystem((os: string) => {
        env.driveMain();
        const jsContents = env.getContents('test.js');
        const hostBindingsFn = `
-        hostVars: 6,
+        hostVars: 5,
        hostBindings: function UnsafeAttrsDirective_HostBindings(rf, ctx) {
          if (rf & 2) {
-            i0.ɵɵattribute("href", ctx.attrHref, i0.ɵɵsanitizeUrlOrResourceUrl)("src", ctx.attrSrc, i0.ɵɵsanitizeUrlOrResourceUrl)("action", ctx.attrAction, i0.ɵɵsanitizeUrl)("profile", ctx.attrProfile, i0.ɵɵsanitizeResourceUrl)("innerHTML", ctx.attrInnerHTML, i0.ɵɵsanitizeHtml)("title", ctx.attrSafeTitle);
+            i0.ɵɵattribute("href", ctx.attrHref, i0.ɵɵsanitizeUrlOrResourceUrl)("src", ctx.attrSrc, i0.ɵɵsanitizeUrlOrResourceUrl)("action", ctx.attrAction, i0.ɵɵsanitizeUrl)("innerHTML", ctx.attrInnerHTML, i0.ɵɵsanitizeHtml)("title", ctx.attrSafeTitle);
          }
        }
      `;
@@ -8491,9 +8488,6 @@ runInEachFileSystem((os: string) => {
          @HostBinding('action')
          propAction: string;

-          @HostBinding('profile')
-          propProfile: string;
-
          @HostBinding('innerHTML')
          propInnerHTML: string;

@@ -8520,44 +8514,16 @@ runInEachFileSystem((os: string) => {
        env.driveMain();
        const jsContents = env.getContents('test.js');
        const hostBindingsFn = `
-        hostVars: 6,
+        hostVars: 5,
        hostBindings: function UnsafePropsDirective_HostBindings(rf, ctx) {
          if (rf & 2) {
-            i0.ɵɵdomProperty("href", ctx.propHref, i0.ɵɵsanitizeUrlOrResourceUrl)("src", ctx.propSrc, i0.ɵɵsanitizeUrlOrResourceUrl)("action", ctx.propAction, i0.ɵɵsanitizeUrl)("profile", ctx.propProfile, i0.ɵɵsanitizeResourceUrl)("innerHTML", ctx.propInnerHTML, i0.ɵɵsanitizeHtml)("title", ctx.propSafeTitle);
+            i0.ɵɵdomProperty("href", ctx.propHref, i0.ɵɵsanitizeUrlOrResourceUrl)("src", ctx.propSrc, i0.ɵɵsanitizeUrlOrResourceUrl)("action", ctx.propAction, i0.ɵɵsanitizeUrl)("innerHTML", ctx.propInnerHTML, i0.ɵɵsanitizeHtml)("title", ctx.propSafeTitle);
          }
        }
      `;
        expect(trim(jsContents)).toContain(trim(hostBindingsFn));
      });

-      it('should generate sanitizers for URL properties in SVG script fn in Component', () => {
-        env.write(
-          'test.ts',
-          `
-            import {Component} from '@angular/core';
-
-            @Component({
-              selector: 'test-cmp',
-              template: \`
-                <svg>
-                  <script [attr.xlink:href]="attr" [attr.href]="attr"></script>
-                </svg>
-              \`,
-            })
-            export class TestCmp {
-              attr = './script.js';
-            }
-          `,
-        );
-
-        env.driveMain();
-
-        const jsContents = env.getContents('test.js');
-        expect(jsContents).toContain(
-          'i0.ɵɵattribute("href", ctx.attr, i0.ɵɵsanitizeResourceUrl, "xlink")("href", ctx.attr, i0.ɵɵsanitizeResourceUrl);',
-        );
-      });
-
      it('should not generate sanitizers for URL properties in hostBindings fn in Component', () => {
        env.write(
          `test.ts`,

diff --git a/packages/compiler/src/compiler.ts b/packages/compiler/src/compiler.ts
@@ -32,7 +32,6 @@ import {publishFacade} from './jit_compiler_facade';
 import * as outputAst from './output/output_ast';
 import {global} from './util';

-export {SECURITY_SCHEMA} from './schema/dom_security_schema';
 export {CUSTOM_ELEMENTS_SCHEMA, NO_ERRORS_SCHEMA, SchemaMetadata} from './core';
 export {core};


diff --git a/packages/compiler/src/core.ts b/packages/compiler/src/core.ts
@@ -76,16 +76,6 @@ export interface Type extends Function {
 }
 export const Type = Function;

-export enum SecurityContext {
-  NONE = 0,
-  HTML = 1,
-  STYLE = 2,
-  SCRIPT = 3,
-  URL = 4,
-  RESOURCE_URL = 5,
-  ATTRIBUTE_NO_BINDING = 6,
-}
-
 /**
 * Injection flags for DI.
 */
@@ -328,3 +318,5 @@ export const enum AttributeMarker {
   */
  I18n = 6,
 }
+
+export {SecurityContext} from './schema/dom_security_schema';
diff --git a/packages/compiler/src/schema/dom_element_schema_registry.ts b/packages/compiler/src/schema/dom_element_schema_registry.ts
@@ -7,7 +7,8 @@
 */

 import {CUSTOM_ELEMENTS_SCHEMA, NO_ERRORS_SCHEMA, SchemaMetadata, SecurityContext} from '../core';
-import {isNgContainer, isNgContent} from '../ml_parser/tags';
+import {isNgContainer, isNgContent, splitNsName} from '../ml_parser/tags';
+import {MATH_ML_NAMESPACE, SVG_NAMESPACE} from '../template/pipeline/src/namespaces';
 import {dashCaseToCamelCase} from '../util';

 import {SECURITY_SCHEMA} from './dom_security_schema';
@@ -18,6 +19,13 @@ const NUMBER = 'number';
 const STRING = 'string';
 const OBJECT = 'object';

+function normalizeTagName(tagName: string): string {
+  const tagNameLower = tagName.toLowerCase();
+  const [ns, name] = splitNsName(tagNameLower, false);
+
+  return ns === SVG_NAMESPACE || ns === MATH_ML_NAMESPACE ? `:${ns}:${name}` : name;
+}
+
 /**
 * This array represents the DOM schema. It encodes inheritance, properties, and events.
 *
@@ -377,8 +385,9 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
      return true;
    }

-    if (tagName.indexOf('-') > -1) {
-      if (isNgContainer(tagName) || isNgContent(tagName)) {
+    const normalizedTag = normalizeTagName(tagName);
+    if (normalizedTag.includes('-')) {
+      if (isNgContainer(normalizedTag) || isNgContent(normalizedTag)) {
        return false;
      }

@@ -389,8 +398,7 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
      }
    }

-    const elementProperties =
-      this._schema.get(tagName.toLowerCase()) || this._schema.get('unknown')!;
+    const elementProperties = this._schema.get(normalizedTag) || this._schema.get('unknown')!;
    return elementProperties.has(propName);
  }

@@ -399,8 +407,9 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
      return true;
    }

-    if (tagName.indexOf('-') > -1) {
-      if (isNgContainer(tagName) || isNgContent(tagName)) {
+    const normalizedTag = normalizeTagName(tagName);
+    if (normalizedTag.includes('-')) {
+      if (isNgContainer(normalizedTag) || isNgContent(normalizedTag)) {
        return true;
      }

@@ -410,7 +419,7 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
      }
    }

-    return this._schema.has(tagName.toLowerCase());
+    return this._schema.has(normalizedTag);
  }

  /**
@@ -433,16 +442,16 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
      propName = this.getMappedPropName(propName);
    }

-    // Make sure comparisons are case insensitive, so that case differences between attribute and
-    // property names do not have a security impact.
-    tagName = tagName.toLowerCase();
+    const normalizedTag = normalizeTagName(tagName);
    propName = propName.toLowerCase();
-    let ctx = SECURITY_SCHEMA()[tagName + '|' + propName];
-    if (ctx) {
-      return ctx;
-    }
-    ctx = SECURITY_SCHEMA()['*|' + propName];
-    return ctx ? ctx : SecurityContext.NONE;
+
+    const securitySchema = SECURITY_SCHEMA();
+    const ctx =
+      securitySchema[normalizedTag + '|' + propName] ??
+      securitySchema['*|' + propName] ??
+      SecurityContext.NONE;
+
+    return ctx;
  }

  override getMappedPropName(propName: string): string {
@@ -482,14 +491,15 @@ export class DomElementSchemaRegistry extends ElementSchemaRegistry {
  }

  allKnownAttributesOfElement(tagName: string): string[] {
-    const elementProperties =
-      this._schema.get(tagName.toLowerCase()) || this._schema.get('unknown')!;
+    const normalizedTag = normalizeTagName(tagName);
+    const elementProperties = this._schema.get(normalizedTag) || this._schema.get('unknown')!;
    // Convert properties to attributes.
    return Array.from(elementProperties.keys()).map((prop) => _PROP_TO_ATTR.get(prop) ?? prop);
  }

  allKnownEventsOfElement(tagName: string): string[] {
-    return Array.from(this._eventSchema.get(tagName.toLowerCase()) ?? []);
+    const normalizedTag = normalizeTagName(tagName);
+    return Array.from(this._eventSchema.get(normalizedTag) ?? []);
  }

  override normalizeAnimationStyleProperty(propName: string): string {