Skip to content
This repository was archived by the owner on Apr 12, 2024. It is now read-only.

docs(guide/security) add more info about template generation #15033

Closed
petebacondarwin opened this issue Aug 17, 2016 · 2 comments
Closed

docs(guide/security) add more info about template generation #15033

petebacondarwin opened this issue Aug 17, 2016 · 2 comments
Labels
type: docs
Milestone
1.5.9

Comments

@petebacondarwin
Copy link
Contributor

We should enumerate the ways the Angular template can be generated.

Reflecting it from the server response is the most popular way, but there are XSS bugs using other compilation sinks in e.g. directives that are not obvious (e.g. $compile(userControlled) and $eval(userControlled).
@petebacondarwin petebacondarwin added this to the 1.5.9 milestone Aug 17, 2016
@Narretz Narretz changed the title docs(guide/security) add more info about template access docs(guide/security) add more info about template generation Aug 17, 2016
@gkalpak
Copy link
Member

gkalpak commented Sep 10, 2016

Is this covered by #15094 or did you have something different in mind?

@petebacondarwin
Copy link
Contributor Author

Covered. Thanks

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
type: docs
Projects
None yet
Milestone
1.5.9
Development

No branches or pull requests
2 participants
@petebacondarwin @gkalpak