Cross-site Scripting (XSS)

angular.js is vulnerable to cross-site scripting XSS attacks. This vulnerability only affects the Firefox and Safari when creating an inert document. In Safari, JavaScript is sanitised using a dummy XHR element while for Firefox a DOMParser is used...

WS-2017-3766

Denial of Service DoS vulnerability was found in angular.js before 1.6.3...

WS-2017-0113

angular.js is vulnerable to XSS. This happens since an attacker can load Angular from the extension, and Angular's auto-bootstrapping can be used to bypass the victim site's CSP protection...

WS-2016-7105

Security vulnerability was found in angular.js before 1.6.1. Inconsistent handling of $sce trustedUrl with $http...