Collaborate Disseminate
I want to design Angular 6 application for PCI-DSS compliance. Is it a good idea to use it having in mind that this is a client-side application with a server back-end? Do you know if there any company which already uses it for application… Continue reading Angular application for PCI-DSS certification
I was wondering what will be the risks when I am only working with semantic templates like handlesbars, ejs or pug?
Is there any open source tool which can help in penetration testing of a website developed using angular.io and nodejs as backend ?
Continue reading Best free open source tool for pen testing of angular.io application [on hold]
Working on a PoC for XSS with Angular (1.2.32) Template Injection.
Any ideas how to bypass it?
Payload:
{{constructor.constructor(this.v=String.fromCharCode(39),this.s=String.fromCharCode(39,97,108,101,114,116,40,49,41,39,… Continue reading Older Angular Template Injeciton XSS – Referencing function in expression bypass
I’ve started to learn angular and I’ve just followed some tutorials. I’ve created my application using the command:
ng new my-first-app
and then I’ve started it using:
ng serve
After my application started, I’ve looked … Continue reading empty angular application has some ad links in the source code
Testing the app with older Angular. Somehow curly brackets are removed when entered in the field, or as parameter.
Found this payload list:
https://gist.github.com/mccabe615/cc92daaf368c9f5e15eda371728083a3
Especially this… Continue reading Older Angular – 1.2.32 – Payload to XSS
I have decided to plunge deep into Angular-like technologies, where all pages are practically just one page that gets never reloaded. And at this point I had the idea, instead of using cookies (which I don’t really need), wh… Continue reading Use javascript variable instead of session cookie
I’ve got an Angular 1 SPA with a Restful API that I’d like to restrict access to. As I understand, typically the OIDC Implicit flow is designed just for this. However, I consider the frontend SPA code sensitive as well and wo… Continue reading Protecting frontend code for SPA + Restful API with OIDC
I have angular 1.5, get information from a form and print it with a sandbox {{vm.name}}. I have tried to enter 1+1 in the form and got 1+1 instead of 2 in the sandbox. my guess is that it is printed into the sandbox as a st… Continue reading How can I escape a string in sandbox-angular 1.5?
I mainly audit web applications and provide the companies with security countermeasures and recommendations. Currently, I have an issue with giving a correct recommendation when it comes to AngularJS Sanitize function against… Continue reading AngularJS Sanitize function vs. server-side output encoding