Skip to content
DOM based AngularJS sandbox escapes
portswigger.net | research | #browser-security | #xss | #sandbox-escape | #portswigger | #exploit-development | #angularjs | #dom-based
Summary
Gareth Heyes develops a DOM-based AngularJS sandbox escape in the previously unexploitable orderBy filter, tracing the framework's sandbox history and exploit development.
- Published
- Collected