AngularJS client-side template / expression injection

Alerts

• 200021-1 AngularJS template injection - reflected 1.0.1 to 1.1.5
• 200021-2 AngularJS expression injection - expression 1.0.1 to 1.1.5
• 200021-3 AngularJS template injection - reflected short legacy 1.0.1 to 1.1.5
• 200021-4 AngularJS template injection - reflected 1.2.0 to 1.2.1
• 200021-5 AngularJS expression injection - expression 1.2.0 to 1.2.18
• 200021-6 AngularJS template injection - reflected 1.2.2 to 1.2.5
• 200021-7 AngularJS template injection - reflected 1.2.6 to 1.2.18
• 200021-8 AngularJS expression injection - expression 1.2.6 to 1.2.18
• 200021-9 AngularJS template injection - reflected 1.2.19 to 1.2.23
• 200021-10 AngularJS expression injection - expression 1.2.19 to 1.2.23
• 200021-11 AngularJS template injection - reflected 1.2.24 to 1.2.29
• 200021-12 AngularJS expression injection - expression 1.2.24 to 1.2.26
• 200021-13 AngularJS expression injection - expression 1.2.27 to 1.3.20
• 200021-14 AngularJS template injection - reflected 1.4.0 to 1.4.9
• 200021-15 AngularJS expression injection - expression 1.4.0 to 1.4.5
• 200021-16 AngularJS template injection - reflected 1.5.0 to 1.5.8
• 200021-17 AngularJS expression injection - expression 1.4.2 to 1.5.8
• 200021-18 AngularJS template injection - reflected 1.6 and later
• 200021-19 AngularJS expression injection - expression 1.6 and later
• 200021-20 AngularJS expression injection - single-quote expression 1.2.19 to 1.2.23
• 200021-21 AngularJS template injection - reflected eval 1.4.0 to 1.4.9
• 200021-22 AngularJS template injection - HTML entity delimiters 1.4.0 to 1.4.9
• 200021-23 AngularJS template injection - HTML entity alternate delimiters 1.4.0 to 1.4.9
• 200021-24 AngularJS expression injection - eval expression 1.4.0 to 1.4.9
• 200021-25 AngularJS template injection - alternate delimiters 1.6 and later

Code