Skip to content
Hallway
0:00 / 0:00

#angular#sandboxescape#domxss

2017 - DOM Based Angular Sandbox Escapes by Gareth Heyes

BSides Manchester

1.9K subscribers • 1 video on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Presented by Gareth Heyes
  • May be out of date. The tools, versions or practices it shows have likely moved on.

Advanced. Deep dive for people who know the field.

3.5K views9 years ago1 recommendation

SecurityWeb developmentExploits and vulnerabilitiesVue, Svelte, Angular and othersWeb and application security

Gareth Heyes demonstrates techniques for escaping the Angular expression sandbox to achieve DOM-based XSS.

The uploader added no description.

Why it's here

1 person recommends this

What people say. Recommended as a detailed presentation on bypassing Angular's client-side sandbox.

u/nibblesecTrusted Contributorin r/netsec • Recommends

DOM Based Angular Sandbox Escapes (presentation video BSides Manchester)
78View on Reddit