Skip to content

Use Angulars JSON Vulnrability Protection in all JSON replies #15

@Bochenski

Description

@Bochenski

JSON Vulnerability Protection
A JSON vulnerability allows third party website to turn your JSON resource URL into JSONP request under some conditions. To counter this your server can prefix all JSON requests with following string ")]}',\n". Angular will automatically strip the prefix before processing it as JSON.

For example if your server needs to return:

['one','two']
which is vulnerable to attack, your server can return:

)]}',
['one','two']
Angular will strip the prefix, before processing the JSON.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions