- Add several security hardenings: register SVG animation attributes in the URL security context, block unsafe SVG animation bindings, treat object[data] as a resource URL, and validate locales to prevent path‑traversal.
- Fix compiler and router behavior: prevent recursive scope checks for invalid NgModule imports and pass outlet context to split, correcting empty‑path named outlets.
- Improve lazy‑loading by resolving component imports using exact specifiers.
