Securing Your AngularJS Applications
Some security measures can be as follows:
Take security measures at the entry and exit points of data to and from the server
Secure the server and prevent unauthorized access to data, and HTML
Encrypt the connection i.e https://
Prevent cross-site scripting (XSS),
Prevent cross-site request forgery (XSRF) attacks
Block JSON injections
AngularJS Templates Securing:
$templateCache caches templates. If you want to use this, you need to remove the cache for each user login
The following or similar stuff can help
Cache-Control: no-cache, no-store, must-revalidate
Pragma : no-cache
Expires : 0
using https can address the snooping and man in the middle attack
You need to prevent JSON Injection Vulnerability
to do this, you can add )]}’, before your JSON, though not valid JSON but helps to prevent JSON injection vulnerability.
Prevent XSS attack in the client side
AngularJS escapes all HTML in text that is displayed through the ng-bind directive, or template interpolation (that is text in {{curly braces}}). From: http://sitestree.com/?p=846
Categories:AngularJS, By Sayed Ahmed
Tags:
Post Data:2014-02-15 23:59:48
Shop Online: https://www.ShopForSoul.com/
(Big Data, Cloud, Security, Machine Learning): Courses: http://Training.SitesTree.com
In Bengali: http://Bangla.SaLearningSchool.com
http://SitesTree.com
8112223 Canada Inc./JustEtc: http://JustEtc.net (Software/Web/Mobile/Big-Data/Machine Learning)
Shop Online: https://www.ShopForSoul.com/
Medium: https://medium.com/@SayedAhmedCanada