XSS in AngularJS App

Question

We are using Angular JS in our app. I want to prevent all input fields from accepting JavaScript etc. Rather than check every single component is there a directive or something I could use out of the box which does this for me? Thanks

6220119 · Accepted Answer · 2013-09-25 15:48:47Z

8

Rather than doing client side filtering, I would leave that to the server side component. But client side will need to do the input validation stuff for the sake of user friendly.

answered Sep 25, 2013 at 15:48

6220119

80910 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

6220119 Over a year ago

That is what I mean by "But client side will need to do the input validation stuff for the sake of user friendly."

Reactgular Over a year ago

+1 for giving the correct answer. -1 to @DaveMackintosh for giving an awful ignorant response.

Fourth · Accepted Answer · 2013-09-25 17:20:09Z

5

ngSanitize in angular 1.2.0 (and some earlier versions) can help you sanitize your inputs.

http://docs.angularjs.org/api/ngSanitize

Or, alternatively, write your own filter that runs the input through regex to strip all HTML/JS/etc.

As a note, you should still have your server sanitize the inputs as well considering users can make direct requests against your server API and you may not have client side validation there.

edited Sep 25, 2013 at 17:20

answered Sep 25, 2013 at 15:14

Fourth

9,3811 gold badge25 silver badges30 bronze badges

Collectives™ on Stack Overflow

XSS in AngularJS App

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related