Merge pull request #639 from jskiba99/patch-2

Update CrossSiteScripting_content9.adoc
This commit is contained in:
René Zubcevic 2019-08-22 11:14:38 +02:00 committed by GitHub
commit 73553d91d3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -39,7 +39,7 @@ _$selector.*text*(someEncodeHtmlMethod(userInputHere))_
http://underscorejs.org/#template http://underscorejs.org/#template
https://nvisium.com/blog/2015/05/21/dont-break-your-backbone-xss-mitigation/ https://nvisium.com/blog/2015/05/21/dont-break-your-backbone-xss-mitigation.html
==== Angular ==== Angular
Angular has sought to escape by default, but the expression language has proven to have 'sandbox' escapes. Best to check Angular has sought to escape by default, but the expression language has proven to have 'sandbox' escapes. Best to check