---
id: 5533
title: "DOM based AngularJS sandbox escapes"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/dom-based-angularjs-sandbox-escapes"
published_at: "2022-08-16T09:18:00Z"
tags: ["browser-security", "xss", "sandbox-escape", "portswigger", "exploit-development", "angularjs", "dom-based"]
phying_url: "https://phying.com/item/5533"
lang: en
---

# DOM based AngularJS sandbox escapes

## Summary

Gareth Heyes develops a DOM-based AngularJS sandbox escape in the previously unexploitable orderBy filter, tracing the framework's sandbox history and exploit development.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-08-16T09:18:00Z
- **Original:** https://portswigger.net/research/dom-based-angularjs-sandbox-escapes
- **Phying News:** https://phying.com/item/5533