---
id: 5505
title: "AngularJS CSP bypass in 56 characters"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/angularjs-csp-bypass-in-56-characters"
published_at: "2023-01-12T08:36:00Z"
tags: ["browser-security", "xss", "portswigger", "payload", "csp-bypass", "angularjs", "shortest-vector"]
phying_url: "https://phying.com/item/5505"
lang: en
---

# AngularJS CSP bypass in 56 characters

## Summary

Gareth Heyes chronicles trimming an AngularJS CSP bypass payload from 63 to 56 characters by exploiting the path property and filter syntax, evading the framework's window detection.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2023-01-12T08:36:00Z
- **Original:** https://portswigger.net/research/angularjs-csp-bypass-in-56-characters
- **Phying News:** https://phying.com/item/5505