GMS-2017-134: XSS in $sanitize in Safari/Firefox

May 25, 2017

Both Firefox and Safari are vulnerable to XSS if we use an inert document created via document.implementation.createHTMLDocument().

References

github.com/angular/angular.js/blob/master/CHANGELOG.md
github.com/angular/angular.js/commit/8f31f1ff43b673a24f84422d5c13d6312b2c4d94

Code Behaviors & Features

Detect and mitigate GMS-2017-134 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →