Web - Client

samedi 28 octobre 2023, 20:08  #1
Web - Client XSS DOM Based - AngularJS
lomdes
  • 5 posts

Hi,
I first tried to inject in the JS context. The server is removing simple quote, I tried to encode them and escape them but no success.
Then I tried to inject in the HTML context, but there too the server is removing < >. I tried to escape them but no success.
Am I on the right path or should I look at how the result is encoded ?

lundi 30 octobre 2023, 21:04  #2
Web - Client XSS DOM Based - AngularJS
lomdes
  • 5 posts

Can someone just confirm that is has something to do with Angular library ?