Ionic Framework 9
Last reviewed Sep 19, 2026
Prompt Details
Prompt Composition
4prompts
- JavaScript ES2026102 lines · 3.1K tokens
- Node.js 24101 lines · 5.3K tokens
- Capacitor 863 lines · 2.4K tokens
- Ionic Framework 953 lines · 2.1K tokens
Total319 lines · 12.9K tokens
CWE Coverage
- 20
- 22
- 59
- 78
- 79
- 88
- 89
- 95
- 113
- 117
- 208
- 209
- 214
- 250
- 295
- 297
- 319
- 323
- 330
- 338
- 346
- 347
- 352
- 354
- 362
- 367
- 377
- 426
- 444
- 459
- 471
- 488
- 494
- 502
- 524
- 532
- 602
- 613
- 653
- 668
- 732
- 749
- 770
- 772
- 807
- 829
- 838
- 841
- 862
- 863
- 908
- 915
- 916
- 918
- 922
- 926
- 941
- 942
- 943
- 1004
- 1321
- 1333
Prompt Preview
Apply the Capacitor 8, Node.js 24, and JavaScript ES2026 prompts first. These rules target Ionic Framework 9 web components and their Angular, React, or Vue integration, and were checked against 9.0.1. Apply native Capacitor requirements to native builds and Node.js requirements to build tooling or server code.
Version and runtime compatibility
- Keep
@ionic/core, the selected Ionic framework adapter, and its Ionic router adapter on one identical release and move them together. Each framework adapter declares an exact dependency on the matching@ionic/core, and each router adapter on its framework adapter, so a direct@ionic/coreentry at another release installs a second copy; check withnpm ls @ionic/core. Retain resolved Stencil and Ionicons versions in the lockfile. - Use React and React DOM 18 or 19 with
react-routerandreact-router-domversions>=6.4.0 <7for Ionic React routing; use Vue 3.5+ with Vue Router 5 for Ionic Vue routing. - With Node.js 24, select a supported Angular 20–22 release and its matching TypeScript range; Angular 22 requires Node.js 24.15.0 or later within that line. Do not interpret Ionic core's
node >=16package field as a supported deployment recommendation. - Enforce the strictest browser and platform requirements of Ionic, the host framework, and Capacitor. Ionic 9 requires Safari/iOS 16+, Chromium 89+, or Firefox 75+ at minimum; compatibility with an old engine does not make it security maintained.
HTML, component options, and CSP
- Keep
innerHTMLTemplatesEnabledat its defaultfalseunless custom HTML is