Questions tagged [angularjs]
AngularJS is a JavaScript framework for developing the client side of single page web applications. Use this tag for all versions of the framework.
44 questions
0
votes
1
answer
760
views
Angular's recommended CSP doesn't make sense to me
I am trying to implement a CSP policy for our Angular 18 application based on Angular's CSP recommendation and I have found that their recommendation does not make sense to me.
Specifically their use ...
- 105
135
votes
4
answers
135k
views
Do I need CSRF token if I'm using Bearer JWT?
Context: Angular site is hosted on S3 behind CloudFront, separate from Express server that is used as API and almost all requests are XMLHttpRequests. All requests are sent without cookies (...
- 1,453
1
vote
1
answer
84
views
Why nikto does not find an Angular application running on localhost?
I would like to run nikto (a web server scanner) on an Angular application running on localhost with Express.
But nikto does not find the Angular application:
$ nikto -host localhost -p 4500 -nossl
- ...
- 201
2
votes
1
answer
2k
views
Is JSON vulnerability still possible?
I have a bunch of REST APIs which would be consumed by frontend applications created by customers using our product. I have suggested to only use last 2 versions of Chrome for running frontend apps. ...
- 121
4
votes
8
answers
12k
views
How to avoid reveal password in a form?
I've recently discover that if you use inspect element to see the source code of the Html, you can change this <input type="password"/> to <input type="text"/> then you can see the ...
- 205
2
votes
0
answers
177
views
Security in Angular: Addressing XSS Concerns with External Libraries and Interpolation
Introduction:
We heavily use external libraries, such as DataTables, in combination with interpolation. In Angular, we've identified two primary XSS prevention strategies:
Interpolation ({{ }})
...
- 31
0
votes
0
answers
252
views
Path-Based Vulnerability on security report on images
We are running Qualys security tests on our angular webapp, and we are getting one issue. Whatever images we are loading in the screens, we are getting "Path-Based Vulnerability" issue for ...
3
votes
2
answers
5k
views
Cookie-to-header token CSRF protection - is it necessary to verify cookie value?
I'm testing Angular application which uses Cookie-to-header token CSRF protection. According to Angular documentation https://angular.io/guide/http#security-xsrf-protection:
When performing HTTP ...
- 1,363
0
votes
1
answer
286
views
Exploit user controllable C# code in webapp
The application in question offers the option to create arbitrary C# code and execute it at any time. These could be considered macros to customize certain tasks. Say that a normal user, who would ...
- 3
0
votes
2
answers
3k
views
Cookie-to-header token CSRF protection
I have the Angular application where CSRF protection is implemented using Cookie-to-header token. It is default AngularJS mechanism to counter CSRF, which uses cookie XSRF-TOKEN and header X-XSRF-...
- 1,363
2
votes
1
answer
3k
views
Am I handling JWT token correctly?
The app is divided into two parts, the fronted - written with the Angular framework and the backend, simple PHP files which handle the login, API calls, etc.
My current flow is the following:
User ...
- 23
3
votes
1
answer
5k
views
How to properly invalidate JWT tokens and sessions in this use case?
I am building a web app, which is made of a Node.js Backend and Angular (NOT AngularJS!!! I only used the tag, because Angular was not available..) Frontend.
How do I properly secure this app? I ...
- 264
4
votes
1
answer
567
views
Mitigation for Insecure Deserialization
I'm trying to look for some way for mitigation of insecure deserialization vulnerability for the application front-end
Then I found this link
https://blog.jscrambler.com/exploring-the-owasp-top-10-by-...
aj go
13
votes
2
answers
17k
views
How to pentest an AngularJS based SPA (Single Page Application)
I am trying to Pentest an application which is built in AngularJS. The difficulties that I am facing:
Burp Suite's "spider this host" option is not able to crawl all the urls as most of the requests ...
- 431
2
votes
1
answer
389
views
I discovered a Client Side Template Injection (CSTI), and after?
As part of a bounty bug, I discovered a Client Side Template Injection (CSTI). I would like to create more "impressive" payload to increase the risk of the vulnerability. The framework ...
- 284