These frameworks give a lot of XSS protections, but mixing server and consumer rendering generates new and a lot more intricate attack avenues far too: not simply is injecting JavaScript in the HTML powerful, but You can even inject articles that should run code by inserting Angular directives, or employing http://web-application-security35414.slypage.com/1274693/a-simple-key-for-web-security-unveiled