Featured

6 Reasons Top Engineers Recommend Angular 👍

Angular, React, Meteor, Ember, Backbone, Knockout…

How do you choose?

Making the wrong decision can be very costly.

Both companies and developers currently face this problem.

Getting started with any new technology is an investment. Whether that’s in time, money or both.

Joe Eames is a software craftsman that has made some big bets on Angular.

Joe is the founder of ng-conf, the largest Angular conference, and is now working with other industry leaders to help educate developers about the framework.

I asked him, “Why are you so confident in the future of Angular?” He gave me six convincing reasons to believe in the framework.

I’ll let you read his response for yourself.

Here are the six reasons why Joe Eames recommends Angular:

First, we have performance. Angular 2 is fast. Blazing fast; in fact, no framework is faster. Some are right there with it neck and neck, but nothing is faster than Angular 2.

Next, Angular 2 was built with modern tools and standards in mind. It supports ES6 modules, tools like webpack and SystemJS, and has even helped push the standards by helping to pioneer decorators in ECMAScript.

The mental model of Angular 2 is much more simplified than Angular 1. No longer do you have to choose between three similar concepts when designing the major building blocks of your application. Instead, components handle everything.

Angular 2 is the natural successor to Angular 1, so it’s poised to become just as popular, if not even more so than Angular 1 was. That means that learning it will likely be good for your career, and later, you will have an easier time finding experienced Angular 2 developers.

Angular 2 is also a complete solution; it includes rendering, compilation, binding, server communication, and unit testing all together. No need to worry about trying to choose from twenty different libraries when you actually need to make an HTTP call.

Finally, Angular 2 was built from the ground up to solve the same problems Angular 1 solves: everything from simple demo apps to large enterprise-scale applications. It is highly testable, supports accessibility and localization, and works great for one man shops through to huge teams.

Want to get more insights like this? Interested in learning Angular?

Get educational content and opportunities from industry leaders like Joe Eames.

Enroll now for early access to content.

Stealing passwords from McDonald’s users

Stealing passwords from McDonald's users through an AngularJS sandbox escape.

  • By abusing an insecure cryptographic storage vulnerability (link) and a reflected server cross-site-scripting vulnerability (link) it is possible to steal and decrypt the password from a McDonald’s user.
  • So when we search on for example , the response will look like this:

    McDonald’s uses AngularJS so we can try to print the unique scope ID using the search value.

  • We can use this sandbox escape as search value, which results in an alert.
  • Normally you can check “Remember me” when signing in, but the McDonald’s sign in page gives us the option to remember the password.
  • We can now use the following sandbox escape, which results in my password in an alert box!

By abusing an insecure cryptographic storage vulnerability and a reflected server cross-site-scripting vulnerability it is possible to steal and decrypt the password from a McDonald’s user.
Continue reading “Stealing passwords from McDonald’s users”

Top 8 Resources to Explore Angular 4 – Hacker Noon

  • Top 8 Resources to Explore Angular 4Angular version 4 is out!In Dec, 8, Igor Minar announced that Angular 3 will be skipped.
  • He also introduced the tentative scheduling of the versions according to the semantic versioning.
  • The due date of Angular 4 release was Mar, 22.
  • In a delay of one day, the final version is available for all of us.As days past, the community begun discussing and discovering the new features.
  • It’s the best time to explore the new version.In this article we will look over the prime, qualitative and valuable resources.

In Dec, 8, Igor Minar announced that Angular 3 will be skipped. He also introduced the tentative scheduling of the versions according to the semantic versioning. The due date of Angular 4 release was…
Continue reading “Top 8 Resources to Explore Angular 4 – Hacker Noon”

The Official Microsoft ASP.NET Site

Core : Add jQuery, Bootstrap, AngularJS Using bower.json  #aspnetcore

  • The product(s) you are about to install leverage the Web Platform Installer (WebPI) for installation.
  • By downloading and using the Web Platform Installer (WebPI), you agree to the license terms and privacy statement for WebPI.
  • This installer will contact Microsoft over the Internet to retrieve product information.
  • WebPI uses the Microsoft Customer Experience Improvement Program (CEIP), which is turned on by default, see privacy statement for more information.
  • To view which software uses CEIP, see here.

Home of the Microsoft ASP.NET development community. Download Visual Studio, post to the forums, read ASP.NET blogs and learn about ASP.NET.
Continue reading “The Official Microsoft ASP.NET Site”

angular-dynamic-forms

angular-dynamic-forms | Module to build forms from #JSON schemas  #AngularJS #javascript

  • You invoke the directive using an element ( ) – other options (such as class, attribute, and comment) are unsupported (for now).
  • In accordance with how AngularJS handles this attribute elsewhere, your entire form’s data will be available in keys of whichever model you specify here (though nested forms are an exception, unless you specify a key in the outer form’s model as the [ ][] of the inner form).
  • Any other attributes you specify on the element are copied across to the or [ ][] element that the directive builds to replace itself with.
  • This allows you to nest s inside each other in the same way as [ ][] (which is one reason this directive implements this pseudo-transclusion).
  • The directive makes every attempt to set up the forms it generates to be valid HTML forms, complete with the ability to have their data submitted to the server by the browser’s native form submission mechanism and still have the data in the same structure that it takes on in your AngularJS models.

angular-dynamic-forms is an angular-js module for building Forms in AngularJS From JSON schemas.
Continue reading “angular-dynamic-forms”