From a2116dc2f6b19554dec1692977a03047b6e4b37e Mon Sep 17 00:00:00 2001
From: Vladyslav_Prykhodko <vprykhodko@thingsboard.io>
Date: Thu, 22 Jan 2026 16:26:01 +0200
Subject: [PATCH] UI: Fixed CVE-2026-22610

---
 ui-ngx/patches/@angular+compiler+18.2.13.patch | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/ui-ngx/patches/@angular+compiler+18.2.13.patch b/ui-ngx/patches/@angular+compiler+18.2.13.patch
index a4245cb0e9..af8e6995cd 100644
--- a/ui-ngx/patches/@angular+compiler+18.2.13.patch
+++ b/ui-ngx/patches/@angular+compiler+18.2.13.patch
@@ -1,5 +1,5 @@
 diff --git a/node_modules/@angular/compiler/fesm2022/compiler.mjs b/node_modules/@angular/compiler/fesm2022/compiler.mjs
-index a00b189..260e7be 100755
+index a00b189..58896de 100755
 --- a/node_modules/@angular/compiler/fesm2022/compiler.mjs
 +++ b/node_modules/@angular/compiler/fesm2022/compiler.mjs
 @@ -18631,6 +18631,7 @@ function SECURITY_SCHEMA() {
@@ -86,3 +86,12 @@ index a00b189..260e7be 100755
          ]);
          registerContext(SecurityContext.RESOURCE_URL, [
              'applet|code',
+@@ -18659,6 +18729,8 @@ function SECURITY_SCHEMA() {
+             'object|codebase',
+             'object|data',
+             'script|src',
++            'script|href',
++            'script|xlink:href',
+         ]);
+     }
+     return _SECURITY_SCHEMA;