AngularJS curly brackets

[korotin]

Hello.

I assume double curly brackets used in AngularJS for data binding are worth adding to that list. If not escaped properly string like {{ blablabla }} may crash AngularJS app.

More on AngularJS syntax: https://docs.angularjs.org/guide/introduction

[xavhan]

and maybe something like that : {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}}

cf : https://finnwea.com/blog/stealing-passwords-from-mcdonalds-users

[Plazmaz]

https://gist.github.com/mccabe615/cc92daaf368c9f5e15eda371728083a3