idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update Angular dangerous functions

Browse Source
This commit is contained in:
Mostafa Lavaei
2020-01-31 17:26:08 +03:30
parent 916d54df11
commit d6c7306f44
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Pattern-Matching/dangerous-functions-angular.txt
View File

@@ -1,8 +1,14 @@
# Angular pipes
bypassSecurityTrustHtml
bypassSecurityTrustScript
bypassSecurityTrustStyle
bypassSecurityTrustUrl
bypassSecurityTrustResourceUrl
# Angular inputs
[innerHTML] //Insert given HTML without escaping dangerous characters
# angular.js (aka Angular 1)
trustAsHtml
$eval
$evalAsync