sync/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-05-31 18:36:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge pull request #388 from Lavaei/master

Browse source 
Add innerHTML as dangerous input in Angular 2+
This commit is contained in:
g0tmi1k 2020-02-13 14:47:41 +00:00 • committed by GitHub
commit 709d6ebeb5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored
View file

@ -1,3 +1,4 @@
.DS_Store
.*.icloud
.gitkeep
.idea

6
Pattern-Matching/dangerous-functions-angular.txt
View file

@ -1,8 +1,14 @@
# Angular pipes
bypassSecurityTrustHtml
bypassSecurityTrustScript
bypassSecurityTrustStyle
bypassSecurityTrustUrl
bypassSecurityTrustResourceUrl
# Angular inputs
[innerHTML] #Insert given HTML without escaping dangerous characters
# angular.js (aka Angular 1)
trustAsHtml
$eval
$evalAsync