angular-security

What problem does it solve?

Protect Angular applications from client-side vulnerabilities including cross-site scripting (XSS), cross-site request forgery (CSRF), unsafe DOM usage, and misconfigured Content Security Policy by providing actionable guidance, safe coding patterns, and migration notes for Angular v21.

Core Features & Use Cases

• XSS Prevention: Guidance on using DomSanitizer, safe innerHTML patterns, and when to use bypass methods responsibly.
• CSRF & HttpClient Security: Instructions for configuring XSRF cookie/header strategies and using HttpClient securely with interceptors.
• CSP & Trusted Types: Recommendations for enabling Content Security Policy and Trusted Types providers to reduce attack surface.
• Use Case: Audit a component that renders user-generated HTML, secure API calls with XSRF protection, and produce code fixes to satisfy CSP and sanitization requirements.

Quick Start

Use the angular-security skill to audit my Angular component and return XSS, CSRF, CSP, and sanitization remediation steps with code examples.