Skip to main content

How Google Handles Security in Angular 4, 5, 6 and 7 Applications?

The cross-site scripting attack doesn’t cover application-level security and for the applications security will need to implements authentication and authorization.

As you know -
1.     Authentication - Who is this user?
2.     Authorization - What can this user do?

Best Practices to Application Level Security -
1.     Keep updated releases of Angular library. Actually, the security team regularly update the fixes of security and defects in latest versions.
2.     Don't add any custom hack on Angular library. It will create the problem to update the latest library.
3.     You Must Prevent Trusting safe values
4.     You Must Follow the HTTP level vulnerabilities
5.     You Must Prevent Cross-site request forgery (CSR Fattacks)
6.     You Must Prevent Cross-site script inclusion (XSSI)
7.     You Must Prevent Security Policy (CSP)
8.     Avoid direct use of the DOM APIs
9.     Use the offline template compiler
10. Try Server-side XSS protection

Angular Sanitization and Security Contexts -
1.     The HTML is used when interpreting a value as HTML (for example - when binding to innerHtml).
2.     The CSS Style is used when binding CSS into the style property.
3.     URL is used for URL properties like <a href="">.
4.     Resource URL is a URL that will be loaded and executed as code, such as <script src="">

References -
https://www.google.com/about/appsecurity/
https://github.com/angular/angular/blob/master/CHANGELOG.md

I hope you are enjoying with this post! Please share with you friends!! Thank you!!!

Labels

Labels:
By Anil Singh | Rating of this article (*****)

Popular posts from this blog

List of Countries, Nationalities and their Code In Excel File

Download JSON file for this List - Click on JSON file    Countries List, Nationalities and Code Excel ID Country Country Code Nationality Person 1 UNITED KINGDOM GB British a Briton 2 ARGENTINA AR Argentinian an Argentinian 3 AUSTRALIA AU Australian an Australian 4 BAHAMAS BS Bahamian a Bahamian 5 BELGIUM BE Belgian a Belgian 6 BRAZIL BR Brazilian a Brazilian 7 CANADA CA Canadian a Canadian 8 CHINA CN Chinese a Chinese 9 COLOMBIA CO Colombian a Colombian 10 CUBA CU Cuban a Cuban 11 DOMINICAN REPUBLIC DO Dominican a Dominican 12 ECUADOR EC Ecuadorean an Ecuadorean 13 EL SALVA...
Read more

nullinjectorerror no provider for httpclient angular 17

In Angular 17 where the standalone true option is set by default, the app.config.ts file is generated in src/app/ and provideHttpClient(). We can be added to the list of providers in app.config.ts Step 1:   To provide HttpClient in a standalone app we could do this in the app.config.ts file, app.config.ts: import { ApplicationConfig } from '@angular/core'; import { provideRouter } from '@angular/router'; import { routes } from './app.routes'; import { provideClientHydration } from '@angular/platform-browser'; //This (provideHttpClient) will help us to resolve the issue  import {provideHttpClient} from '@angular/common/http'; export const appConfig: ApplicationConfig = {   providers: [ provideRouter(routes),  provideClientHydration(), provideHttpClient ()      ] }; The appConfig const is used in the main.ts file, see the code, main.ts : import { bootstrapApplication } from '@angular/platform-browser'; import { appConfig } from ...
Read more

React Lifecycle Components | Mounting, Updating, Unmounting

In React, each component has a life-cycle which manipulate during its three main phases. The following three phases are: 1.       Mounting 2.       Updating 3.       Unmounting React does so by “ Mounting ” (adding nodes to the DOM), “ Unmounting ” (removing them from the DOM), and “ Updating ” (making changes to nodes already in the DOM). Mounting - Lifecycle Phase 1 Mounting is used for adding nodes (elements) to the DOM. The React has four built-in methods that gets called, in this order, when mounting a component - 1.       constructor() 2.       getDerivedStateFromProps() 3.       render() 4.       componentDidMount() Note – 1)       The render() method is required and It always be called and the others methods are optional (you will call...
Read more

51 Best React Interview Questions and Answers

1) What Is React? React is a fast, open-source, and front-end JavaScript library and It was developed by Facebook in 2011 for building complex, stateful and interactive UI in web as well as mobile Applications. React follows the component based approach which helps you to building reusable and interactive web and mobile user interface (UI) components. React has one of the largest communities supporting it. The high level component Lifecycle - At the highest level component Lifecycle, React components have lifecycle events that are - 1.       Initialization 2.       State/Property Updates 3.       Destruction Explore to detail understanding   -  React Lifecycle Components Reactjs is very fast technology that can be trusted for complex tasks and can simply be trusted for quality outcomes. 2) When Reactjs released? March 2013 3) What Is the current stable version of ...
Read more

Angular 8, 7, 6, 5, 4, 2 - Open and Close Modal Popup Using Typescript and Bootstrap

How to Create a Modal Popup for Angular? Two ways to CREAT Modal Popup Window - 1.       Modal Popup using Typescript and Bootstrap 2.       Modal Popup using Angular Material Dialogue Open Modal Popup Using Typescript and Bootstrap – Download and use the Bootstrap CDN to deliver Bootstrap's compiled CSS and JS to your project. Steps 1 – Add Bootstrap CSS and Js files in the AppComponent.HTML file. < link rel = "stylesheet" href = "https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css"   crossorigin = "anonymous" > < script src = "https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js"   crossorigin = "anonymous" ></ script > You can also Install Bootstrap from NPM – npm install bootstrap – save Steps 2 – Add Style CSS for Login and Popup validations and it looks like. .ng-valid[ required ], .ng-valid.required   {  ...
Read more