Questions tagged [angularjs]
AngularJS is a JavaScript framework for developing the client side of single page web applications. Use this tag for all versions of the framework.
9
questions with no upvoted or accepted answers
4
votes
0
answers
116
views
What are commonly used security practices when writing a hybrid mobile app with a framework like ionic 2?
I'm new to hybrid app development and web development in general. Are there common coding practices/techniques I can use to ensure that I write code which does not put the end user at risk of ...
- 141
2
votes
0
answers
1k
views
Protecting frontend code for SPA + Restful API with OIDC
I've got an Angular 1 SPA with a Restful API that I'd like to restrict access to. As I understand, typically the OIDC Implicit flow is designed just for this. However, I consider the frontend SPA code ...
- 21
2
votes
0
answers
277
views
Is it possible to use Burp to show hidden AngularJS elements, that are hidden using "ngHide"?
I’m performing an audit of an AngularJS application that uses Angular's ngShow and ngHide to show and hide elements on a page. Is it possible to use Burp Proxy, Burp Macros, or another tool to ...
- 21
2
votes
0
answers
540
views
Angular XSS not evaluated
Using an older version of AngularJS : 1.2.21 from example, there are some playload that can generate an XSS.
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(...
- 290
1
vote
0
answers
254
views
Securing API keys for accessing Google APIs via Front End (UI)
This question is about how to secure API keys. Not sure if this is in the same category as Key management for Cryptography and should follow the same rules. See details below.
We currently have hybrid ...
1
vote
0
answers
516
views
Angular JS alternative xss payload?
Basically, I have a situation right now where the registration website allow to register via email address and then redirects me to another website (subdomain) of the original website. The subdomain ...
- 11
0
votes
0
answers
65
views
Dealing with CVE-2022-2584 in Angular JS
The package angular after 1.7.0 is vulnerable to Regular Expression Denial of Service (ReDoS). There aren't many details available around this issue. Since this version of Angular is out of support, I'...
- 101
0
votes
0
answers
39
views
JavaScript API calls in Browser security
We want to develop a JavaScript application (with Angular) which will communicate with various other systems via API calls. For example, a checkout page where all entered information should be sent to ...
- 1
0
votes
0
answers
379
views
How to evade Angular HTML sanitizer for XSS
I'm trying to evade the HTML sanitizer in a field I found more vulnerable in my application to test some XSS injection.
The field that I'm trying to exploit is a dropdown with the following code. The ...
- 101