Escaping from JavaScript Sandbox (AngularJS)

-=[ 📄 Info. ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

#liveoverflow

[daviddelille]

I love how he goes to his own website to access a page not protected by CSP. 😂

[JRAN]

I always wondered what those XSS payloads were, I thought it was some sort of weird SSTI, but apparently, it's a useful trick to try on AngularJS websites.
Thanks for the explanation!

[sectorx]

There are a lot of angular .something scattered out there

[vaisakh_km]

Isn't this a part of a liveunderflow video already uploaded...