---
id: 5503
title: "Bypassing AngularJS bind HTML"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/bypassing-angularjs-bind-html"
published_at: "2020-09-08T12:23:00Z"
tags: ["xss", "portswigger", "cors", "angularjs", "svg", "ng-bind-html", "cross-origin"]
phying_url: "https://phying.com/item/5503"
lang: en
---

# Bypassing AngularJS bind HTML

## Summary

Gareth Heyes abuses the SVG use element to include cross-origin SVG on legacy Edge, achieving script execution that bypasses AngularJS ng-bind-html in versions before 1.5.0.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2020-09-08T12:23:00Z
- **Original:** https://portswigger.net/research/bypassing-angularjs-bind-html
- **Phying News:** https://phying.com/item/5503