--- title: "Ng-News 25/48: Signal Forms & @angular/aria" url: https://daily.dev/posts/ng-news-25-48-signal-forms-angular-aria-0iacj4uk3 source_url: https://dev.to/this-is-angular/ng-news-2548-signal-forms-angulararia-je type: article source: "This is Angular" published: 2025-12-12T14:41:55.921Z updated: 2026-08-24T06:53:05.675Z tags: ["security", "webdev", "frontend", "angular", "accessibility"] reading_time: 4 upvotes: 2 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ng-News 25/48: Signal Forms & @angular/aria **[This is Angular](https://daily.dev/sources/tia)** · 4 min read · 2 upvotes · 0 comments ## Summary Angular's December Q&A session covered Signal Forms, now experimental in v21 and already used in internal Google applications. The @angular/aria package provides headless accessibility primitives that work across frameworks supporting Signals. PrimeNG released version 21 with zoneless support, pass-through properties, and unstyled components. Two security vulnerabilities were patched: an XSRF token leak via protocol-relative URLs and an XSS vulnerability in SVG template sanitization, both fixed in versions 19, 20, and 21. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Angular 21 Savage](https://daily.dev/posts/angular-21-savage-ekrhhcqvr) · Bytes by ui.dev · 3 upvotes · 1 comments - [Ng-News: Angular in 2025](https://daily.dev/posts/ng-news-angular-in-2025-x122fslye) · This is Angular · 25 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#webdev](https://daily.dev/tags/webdev), [#frontend](https://daily.dev/tags/frontend), [#angular](https://daily.dev/tags/angular), [#accessibility](https://daily.dev/tags/accessibility) [View this post on daily.dev](https://daily.dev/posts/ng-news-25-48-signal-forms-angular-aria-0iacj4uk3)