XSS without HTML: Client-Side Template Injection with AngularJS

portswigger.netsite

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲
   XSS via a spoofed React element danlec.com

   site category #web-security link ↗
2. ▲
   XSS without parentheses and semi-colons portswigger.net

   site category #web-security link ↗
   
3. ▲
   XSS Cheat Sheet - 2018 Edition leanpub.com

   site category #web-security link ↗
   
4. ▲
   XSS.png github.com

   tool category #web-security link ↗
   
5. ▲
   @Angular on X x.com

   site category #angular link ↗
   
6. ▲
   DOM based Angular sandbox escapes portswigger.net

   site category #web-security link ↗
   

Web Security › Introduction > AngularJS: “Written by Gareth Heyes.”