Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

angulardart/angular

              master @ e943f6f
            

Fixes

CVEs

HIGH

Peak severity

75.0%

Coverage

Highlights

Cross-Site Scripting (XSS): 2 prior fixes. Scrutinize any change in this area.

HTML: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting (XSS): Incomplete attribute blocking rules in the sanitizer allowed DOM XSS via the 'srcdoc' attribute on iframe elements. If HTML sanitization is bypassed or contains missing block rules, arbitrary script execution can occur in the application context.

Cross-Site Scripting: Including high-risk elements such as iframes in the HTML sanitizer's default element allowlist exposes the application to nested, iframe-based XSS vectors. Tightening default element rules is critical to keeping the template compiler secure.

Bypass of Security Decision in Common Technology: Retrieving the SanitizationService from a user injector instead of a trusted minimal injector allows client code to substitute a custom, degraded, or disabled sanitizer implementation, completely subverting template security.