Add protection against XSS

未关闭

#86 创建于 2016年5月14日 1 条评论 1 个 reaction 已指派 0 人在 GitHub 查看

描述

In my app the following code opens a dialog box with "hi" :
`Notification.success("Some message alert('hi')")`

It shows that my app was vulnerable to XSS because Notification was used in that sort of way : `Notification.error("got an error : "+myError);`

And myError is a string that can come from anywhere, and is unsecure.

My fix was to decore Notification service and apply $sanitize on strings.

这个仓库没有索引到贡献指南

这个 Issue 还没有评估数据。