Igor Sedov - Invidious

Igor Sedov

Understand Angular with clear, thoughtful, visual explanations. Signals, Resources, and other core Angular topics are already covered on my channel, with new features, updates, and advanced topics added regularly.

Instead of screencasts, I use animations and graphics to explain how Angular works step by step. This visual approach focuses only on what is essential, making concepts easier to understand and remember. My videos are optimized for smartphones with large, clear elements and minimal code on screen, so explanations stay simple and easy to follow. Improve your Angular skills!

Throughout my career, I have held senior positions in technology and telecommunications companies, where I have been responsible for driving company development, technology, and product development. I gained invaluable experience in managing teams, working with suppliers, contractors, and clients.

View channel on YouTube

Switch Invidious Instance

Videos

Shorts

Courses

Playlists

Posts

Igor Sedov

🚀 Angular 21.1 is coming next week 👀
🎯 Angular Release Schedule

30 minutes ago | [YT] | 3

View 0 replies

Igor Sedov

🔄 Angular Signal Forms: Directive Replace

1 day ago | [YT] | 60

View 4 replies

Igor Sedov

🚀 New in Angular 21
➕ `referrerPolicy` option added
The option allows developers to control how much referrer information is sent with each HTTP request.

2 weeks ago | [YT] | 65

View 0 replies

Igor Sedov

🅰️ New in Angular 21
⚠️ Breaking Change ⚠️
✔️ lastSuccessfulNavigation is NOW a signal!
Any code that used lastSuccessfulNavigation as a value must now invoke it as a signal.

4 weeks ago | [YT] | 71

View 10 replies

Igor Sedov

⚠️ Stored XSS Vulnerability in Angular
⛔️ SVG Animation, SVG URL, MathML Attributes
Check your SVG and MathML bindings!

Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes (angular/compiler).

This vulnerability affects specific attributes:
1. SVG URL attributes (e.g. xlink:href)
2. MathML URL attributes (e.g. math|href, annotation|href)
3. SVG animation when attributeName is bound to "href" or "xlink:href"

Attack Preconditions:
1. The app must bind untrusted data to one of the vulnerable attributes
2. The payload runs after a user interaction or when an SVG animation triggers

Source: github.com/angular/angular/security/advisories/GHS…

1 month ago | [YT] | 54

View 0 replies

Igor Sedov

⚠️ XSRF Token Leak in Angular HttpClient
⛔️ via Protocol-Relative URLs
Check your HttpClient usage!

Issue:
Angular HttpClient incorrectly treats protocol-relative URLs (//domain) as same-origin.

Result:
It sends the XSRF token in the X-XSRF-TOKEN header to an external domain.

Impact:
An attacker who controls that domain can capture the token and perform CSRF actions on behalf of the user.

Conditions:
XSRF protection must be enabled, and the app must send a state-changing request to a //attacker.com style URL.

Source: github.com/angular/angular/security/advisories/GHS…