SecurityValidators (Reactive Forms)

Static factory class exposing Reactive Forms validators that bridge the shared security helpers into Angular ValidatorFn contracts. Lives in the @angular-helpers/security/forms sub-entry so consumers not using Reactive Forms do not pay a bundle cost.

TypeScriptexample.ts
import { SecurityValidators (Reactive Forms) } from '@angular-helpers/security/forms'

# Methods

MethodSignatureReturnsDescription
strongPasswordstatic strongPassword(options?: { minScore?: 0 | 1 | 2 | 3 | 4 }): ValidatorFnValidatorFnReturns ValidatorFn that fails with { weakPassword: { score, required } } when entropy score < minScore (default 2).
safeHtmlstatic safeHtml(options?: HtmlSanitizerOptions): ValidatorFnValidatorFnFails with { unsafeHtml: true } when sanitization would alter the input. Allowlist is configurable.
safeUrlstatic safeUrl(options?: { schemes?: readonly string[] }): ValidatorFnValidatorFnFails with { unsafeUrl: true } for malformed URLs or schemes outside the allowlist (default: http, https).
noScriptInjectionstatic noScriptInjection(): ValidatorFnValidatorFnFails with { scriptInjection: true } for
noSqlInjectionHintsstatic noSqlInjectionHints(): ValidatorFnValidatorFnFails with { sqlInjectionHint: true } for common SQLi sentinels — defense-in-depth; parameterize server-side queries.
LCP N/A
CLS N/A
INP N/A