Sanitize & Encrypt Password Login with AngularJS

Sam Deering Sam Deering security

I want to sanitize my login form input and encrypt passwords to avoid script injections.

Info: $sanitize is a service provided by AngularJS that can be used to protect against injection attacks when you inject HTML into a web page.

LoginController.js

JavaScript
1
2
3
4
5
6
7
8
9
 
...
 
  $scope.credentials = { email: "", password: "" };
 
  $scope.login = function(credentials) {
    AuthenticationService.login($scope.credentials);
  };
 

AuthenticationService.js

JavaScript
1
2
3
4
5
6
7
8
9
10
11
12
13
 
...
 
  var sanitizeCredentials = function(credentials) {
    return {
      email: $sanitize(credentials.email),
      password: $sanitize(credentials.password),
      csrf_token: CSRF_TOKEN
    };
  };
 
  var login = $http.post("/auth/login", sanitizeCredentials(credentials));
 

Encrypt password and token

This will protect against script injections but now you might want to also encrypt you passwords and tokens so they are sent obfuscated. So this is how you might encrypt your username and password with AngularJS.

Todo: add the best way to do this… any ideas???

Sam Deering

Sam Deering

Sam is a web developer, online entrepreneur and investor. In his spare time he enjoys coding, playing chess and sharing what he learns with others.

One thought on “Sanitize & Encrypt Password Login with AngularJS”

Leave a Reply

Your email address will not be published. Required fields are marked *