|
|
|
|
|
by dancek
3530 days ago
|
|
Obviously. The quoted paragraph is buildup to the fact that AngularJS evals content on purpose, and does not really even try to be secure against maliciously-crafted DOM. Browsers, on the other hand, are designed to resist attacks. But yes, certainly you need to trust the browser more than an extension. |
|