skills.rest
mamamou
mamamouCOMMUNITY
Explore all skills by this author →
GitHub

angular-security

Codify OWASP Top 10:2025 practices into Angular 19+ security guidelines.

16|2|Updated Apr 11, 2026
Search Tags:#security#xss#angular#csp#ssr#ngrx#httpclient
One-click install
npx skills add https://github.com/mamamou/ai-coding-skills --skill angular-security-mamamou
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: angular-security
Source: https://github.com/mamamou/ai-coding-skills/tree/main/angular-security
Command: npx skills add https://github.com/mamamou/ai-coding-skills --skill angular-security-mamamou

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Angular frontend security best practices for building secure, production-grade applications. Use when writing or reviewing security-sensitive Angular code, configuring authentication, handling user input, setting up CSP, securing Angular SSR, or hardening an Angular application. Covers OWASP 2025, XSS prevention, DomSanitizer, template injection, CSRF/XSRF, HttpClient security, Angular SSR vulnerabilities (CVE-2025-59052), XSRF token leakage (CVE-2025-66035), stored XSS via SVG (CVE-2025-66412), AutoCSP, Trusted Types, zoneless Angular, functional guards/interceptors, NgRx security, supply chain, and deployment hardening. Keywords: Angular security, XSS, CSRF, CSP, DomSanitizer, bypassSecurityTrust, template injection, AOT, Angular SSR, HttpClient, XSRF, route guards, NgRx, signals, zoneless.

Core Features & Use Cases

  • Comprehensive Angular security guidance covering authentication, input handling, CSP, SSR, and deployment hardening.
  • CVE-aware patterns and practical examples for HttpClient, DomSanitizer, route guards, and NgRx security.
  • Deployment, build, and runtime hardening aligned with OWASP Top 10:2025.

Quick Start

Audit your project against OWASP 2025 guidelines and implement recommended hardening steps.

Frequently Asked Questions about angular-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent XSS in Angular using DomSanitizer and Trusted Types?▼

Prevent XSS in Angular by applying safe DOM sanitization patterns and enforcing Trusted Types. This approach codifies OWASP 2025 practices to block template injection and stored XSS via SVG vulnerabilities.

How do I secure Angular SSR against XSRF token leakage and CVE vulnerabilities?▼

Secure Angular SSR by enforcing per-request isolation and applying robust token handling patterns. This mitigates known XSRF token leakage and specific Angular SSR CVEs in production environments.

What is the best way to configure Content Security Policy (CSP) for Angular 19+ projects?▼

The best way to configure CSP for Angular 19+ is using AutoCSP and deployment hardening guidelines. This aligns your application with OWASP Top 10:2025 practices to restrict unauthorized script execution.

Can I use functional guards and interceptors to secure Angular HttpClient requests?▼

Yes, you can secure HttpClient requests by applying robust functional guards and interceptors. This ensures secure token handling and protects against CSRF and XSRF attacks during data transit.

Does this Angular security guidance cover NgRx state management vulnerabilities?▼

Yes, this guidance covers NgRx security patterns alongside HttpClient and route guards. It provides actionable, CVE-aware examples to secure state management and prevent data leakage in Angular applications.

When do I need to audit my Angular project against OWASP Top 10:2025?▼

You need to audit your Angular project against OWASP 2025 when writing security-sensitive code, configuring authentication, or hardening deployments. This ensures compliance with modern frontend security standards.

Related Skills

Explore More Software Engineering Skills→
Gentleman-ProgrammingGentleman-Programming
618

angular-core

Implement Angular core patterns with signals, inject, and zoneless workflows.

Official
Intermediate
erikliebeneriklieben
7

dev-security-frontend

Scans Angular and TypeScript frontend code for OWASP Top 10:2025 compliance and vulnerabilities.

Community
Advanced
PedroHBOPedroHBO
1

angular-patterns

Apply Angular patterns for state management, routing, and performance optimization.

Community
Advanced
TencentBlueKingTencentBlueKing
839

JavaScript 安全审查

Identify and remediate JavaScript frontend security issues in React, Vue, and Angular projects.

Official
Intermediate