Reflected XSS with AngularJS sandbox escape without strings (Video solution, Audio)

This video shows the lab solution of "Reflected XSS with AngularJS sandbox escape without strings" from Web Security Academy (Portswigger)

[rootaccess]

nice video bro, u literally typed in the solution posted.

[salt]

Hello, I don't understand this line:
[123]|orderBy:'Some string'
I understand that it is used to avoid the usage of $eval() and [123] does not matter but I don't understand how the expression can be executed.

[dhirajchaudhary]

Useless video !! No explanation Only Copy Paste !