fix($parse): disallow access to Function constructor

Enhances sandboxing of Angular Expressions to prevent attacks via:

  {}.toString.constructor(alert("evil JS code"))

Chirayu Krishnappa committed 12y ago

5349b20097dc5cdff0216ee219ac5f6e6ef8c219

Parent: fd87eb0

Committed by Igor Minar <igor@angularjs.org> on 7/3/2013, 7:03:56 AM