-
Notifications
You must be signed in to change notification settings - Fork 7
/
Copy pathA1.js
105 lines (83 loc) · 2.04 KB
/
A1.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
// app.js
(function() {
'use strict';
angular
.module('app', [
'ngSanitize',
'pascalprecht.translate'
]);
})();
// binding.controller.js
(function() {
'use strict';
angular
.module('app')
.controller('BindingController', BindingController);
function BindingController($sanitize, $sce) {
var vm = this;
var data = '<b onmouseover="alert(\'over\')">trust me</b>: <script>alert("XSS");</script> <xss>XSS</xss>';
vm.untrusted = data;
vm.sanitized = $sanitize(data);
vm.trusted = $sce.trustAsHtml(data);
}
})();
// interpolate.controller.js
(function() {
'use strict';
angular
.module('app')
.controller('InterpolateController', InterpolateController);
function InterpolateController($interpolate, $sce) {
var vm = this, i;
vm.twitter = "hakanson";
vm.template = 'Twitter: <a href="https://twitter.com/{{twitter}}">@{{twitter}}</a>';
vm.trusted = false;
vm.rendered = "";
vm.update = function () {
var context = { twitter : vm.twitter};
i = $interpolate(vm.template);
vm.rendered = i(context);
if (vm.trusted == true) {
vm.rendered = $sce.trustAsHtml(vm.rendered);
}
};
vm.update();
}
})();
// trust.filter.js
(function() {
'use strict';
angular
.module('app')
.filter('trust', function($sce) {
return function(input) {
return $sce.trustAsHtml(input);
};
});
})();
// app.config.js
(function() {
'use strict';
angular
.module('app')
.config(function ($translateProvider) {
$translateProvider.translations('en', {
GREETING: '<b onmouseover="alert(\'over\')">Hello</b> {{name}}',
GREETINGX: '<b>Hello</b> {{name | uppercase}}'
});
$translateProvider.preferredLanguage('en');
//$translateProvider.useSanitizeValueStrategy('sanitize');
});
})();
// translate.controller.js
(function() {
'use strict';
angular
.module('app')
.controller('TranslateController', TranslateController);
function TranslateController() {
var vm = this;
//vm.parameters = {name:'<i>Kevin</i>'};
vm.parameters = {name:'<i onmouseover="alert(\'Kevin\')">Kevin</i>'};
}
})();