Skip to content

Instantly share code, notes, and snippets.

@lsg-vtaran

lsg-vtaran/templateInjection.ts Secret

Created June 9, 2023 08:10
Show Gist options
  • Save lsg-vtaran/3ba18bc44cdf2670d5eb6f4731ae6ae5 to your computer and use it in GitHub Desktop.
Save lsg-vtaran/3ba18bc44cdf2670d5eb6f4731ae6ae5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
templateInjection.ts
//app.component.ts
const _userInput = '{{constructor.constructor(\'alert(1)\'()}}'
@Component({
selector: 'app-root',
template: '<h1>title</h1>' + _userInput
})
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment