• caglararli@hotmail.com
  • 05386281520

Does other frontend framework have similar issue like AngularJS?

Çağlar Arlı      -    2 Views

Does other frontend framework have similar issue like AngularJS?

I'm reading an article that talks about XSS exploitation on AngularJS,

enter image description here

AngularJS will render the template in ng-html, and it bypasses sanitize-html.

My questions,

  1. I'm wondering if other frameworks like Vue.js and React is also vulnerable to this attack?
    • I tried to use {{ }} in React and it's not executed by dangerouslySetInnerHTML method.
    • I tried to use {{ }} in Vue.js and it's not parsed by v-html directive.
  2. Why isn't other frameworks affected in this way?