{"action":"opened","issue":{"url":"https://api.github.com/repos/angular/angular.js/issues/14628","repository_url":"https://api.github.com/repos/angular/angular.js","labels_url":"https://api.github.com/repos/angular/angular.js/issues/14628/labels{/name}","comments_url":"https://api.github.com/repos/angular/angular.js/issues/14628/comments","events_url":"https://api.github.com/repos/angular/angular.js/issues/14628/events","html_url":"https://github.com/angular/angular.js/issues/14628","id":155331044,"number":14628,"title":"DOM data manipulation (DOM-based)","user":{"login":"ser-storchak","id":2908781,"avatar_url":"https://avatars.githubusercontent.com/u/2908781?v=3","gravatar_id":"","url":"https://api.github.com/users/ser-storchak","html_url":"https://github.com/ser-storchak","followers_url":"https://api.github.com/users/ser-storchak/followers","following_url":"https://api.github.com/users/ser-storchak/following{/other_user}","gists_url":"https://api.github.com/users/ser-storchak/gists{/gist_id}","starred_url":"https://api.github.com/users/ser-storchak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ser-storchak/subscriptions","organizations_url":"https://api.github.com/users/ser-storchak/orgs","repos_url":"https://api.github.com/users/ser-storchak/repos","events_url":"https://api.github.com/users/ser-storchak/events{/privacy}","received_events_url":"https://api.github.com/users/ser-storchak/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-17T18:38:25Z","updated_at":"2016-05-17T18:38:25Z","closed_at":null,"body":"The application may be vulnerable to DOM-based DOM data manipulation. Data is read from window.name and written to the 'name' property of a DOM element via the following statement:\r\n•\twindow.name= window.name.replace(NG_ENABLE_..., \"\" ) \r\nNote: The name of the current window is a valid attack vector for DOM-based vulnerabilities. An attacker can directly control the name of the targeted application's window by using code on their own domain to load the targeted page using either window.open() or an iframe tag, and specifying the desired window name.\r\n"}}