Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [angularjs]

AngularJS is a JavaScript framework for developing the client side of single page web applications. Use this tag for all versions of the framework.

10 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
140 views

What are commonly used security practices when writing a hybrid mobile app with a framework like ionic 2?

I'm new to hybrid app development and web development in general. Are there common coding practices/techniques I can use to ensure that I write code which does not put the end user at risk of ...
ThisIsNotAnId's user avatar
2 votes
0 answers
101 views

Security in Angular: Addressing XSS Concerns with External Libraries and Interpolation

Introduction: We heavily use external libraries, such as DataTables, in combination with interpolation. In Angular, we've identified two primary XSS prevention strategies: Interpolation ({{ }}) ...
VJSpeter's user avatar
2 votes
0 answers
2k views

Protecting frontend code for SPA + Restful API with OIDC

I've got an Angular 1 SPA with a Restful API that I'd like to restrict access to. As I understand, typically the OIDC Implicit flow is designed just for this. However, I consider the frontend SPA code ...
hhp's user avatar
  • 21
2 votes
0 answers
333 views

Is it possible to use Burp to show hidden AngularJS elements, that are hidden using "ngHide"?

I’m performing an audit of an AngularJS application that uses Angular's ngShow and ngHide to show and hide elements on a page. Is it possible to use Burp Proxy, Burp Macros, or another tool to ...
blitzen's user avatar
  • 21
2 votes
0 answers
584 views

Angular XSS not evaluated

Using an older version of AngularJS : 1.2.21 from example, there are some playload that can generate an XSS. {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(...
mpgn's user avatar
  • 290
1 vote
0 answers
383 views

Securing API keys for accessing Google APIs via Front End (UI)

This question is about how to secure API keys. Not sure if this is in the same category as Key management for Cryptography and should follow the same rules. See details below. We currently have hybrid ...
Xmus Jackson Flaxon Waxon's user avatar
1 vote
0 answers
568 views

Angular JS alternative xss payload?

Basically, I have a situation right now where the registration website allow to register via email address and then redirects me to another website (subdomain) of the original website. The subdomain ...
Jon Loog's user avatar
0 votes
0 answers
190 views

Progressive profiling with auth0: Security when communicating with auth0 actions

I currently try to implement progressive profiling with auth0 according to: https://auth0.com/blog/using-redirect-with-actions-to-gather-user-info-and-increase-conversions/ to gather first name and ...
Christian's user avatar
  • 101
0 votes
0 answers
193 views

Path-Based Vulnerability on security report on images

We are running Qualys security tests on our angular webapp, and we are getting one issue. Whatever images we are loading in the screens, we are getting "Path-Based Vulnerability" issue for ...
Salil Bansal's user avatar
0 votes
0 answers
707 views

How to evade Angular HTML sanitizer for XSS

I'm trying to evade the HTML sanitizer in a field I found more vulnerable in my application to test some XSS injection. The field that I'm trying to exploit is a dropdown with the following code. The ...
davis's user avatar
  • 101