Angular's December Q&A session covered Signal Forms, now experimental in v21 and already used in internal Google applications. The @angular/aria package provides headless accessibility primitives that work across frameworks supporting Signals. PrimeNG released version 21 with zoneless support, pass-through properties, and unstyled components. Two security vulnerabilities were patched: an XSRF token leak via protocol-relative URLs and an XSS vulnerability in SVG template sanitization, both fixed in versions 19, 20, and 21.
Table of contents
Signal Forms at Angular Q&ASignal Forms at Angular Air@angular/aria at Angular AirPrimeNg 21Security Advisories5.6K Impressions