Cross-site Scripting (XSS)

angular.js is vulnerable to cross-site scripting XSS attacks. This vulnerability only affects the Firefox and Safari when creating an inert document. In Safari, JavaScript is sanitised using a dummy XHR element while for Firefox a DOMParser is used...