Template Injection in Modern Frameworks

Client-side template injection (CSTI) affects frameworks like AngularJS and Vue.js. When user input is rendered within template-evaluated contexts, attackers can execute arbitrary JavaScript.

AngularJS sandbox escapes have been a rich area of security research.