angular-toastr icon indicating copy to clipboard operation
angular-toastr copied to clipboard

Published 20 hours ago • verified publisher icon Foxandxss

trustAsHtml used for title and message -XSS Attack

Open tushartrantor opened this issue 8 years ago • 0 comments

trustAsHtml used for title and message is prone to XSS when allowHtml true. Only ng-bind-html should be enough to allow for whitelisted tags according to me. How can I rectify this problem ?

tushartrantor avatar Mar 03 '17 09:03 tushartrantor