Squeeze-contextual-escaping (SCE) ngarujuk kana kumaha AngularJS nyegah aplikasi tina rendering eusi jahat anu dihasilkeun ku pangguna, pikeun nyegah XSS sareng serangan sanés. (https://docs.angularjs.org/api/ng/service/$sce#strict-contextual-escaping) Kalayan panyalindungan ieu dilemah, sagala kode anu nyandak input téks ti pangguna sareng nempatkeun kana HTML tiasa dieksploitasi pikeun ngajalankeun kode arbitrary dina panyungsi wéb pangguna sanés. ``html <input ng-model="Content"> <ng-bind-html="user</user"> <user</user> ``` This Angular HTML code would be vulnerable to XSS. Any JavaScript the user enters in a script tag It would be executed by any other users who render the site
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence