Jason Bedard
6e3bbfc744
Autofilling with previous values (which will then be `$interpolate`ed) could lead to XSS or errors
13 lines
366 B
HTML
13 lines
366 B
HTML
<!DOCTYPE html>
|
|
<html ng-app="test">
|
|
<body ng-class="{hacked: internalFnCalled}">
|
|
<form>
|
|
<input id="input1" type="hidden" value="{{value}}" />
|
|
<input id="input2" type="hidden" ng-value="value" />
|
|
|
|
<textarea ng-model="value"></textarea>
|
|
</form>
|
|
<script src="angular.js"></script>
|
|
<script src="script.js"></script>
|
|
</body>
|
|
</html> |