check-security

Angular Security Audit

Perform a comprehensive security audit of the Angular application.

What This Command Does

1. Vulnerability Scanning

   • XSS vulnerabilities
   • CSRF protection
   • Injection risks
   • Authentication issues

2. Dependency Audit

   • npm audit results
   • Outdated packages
   • Known vulnerabilities

3. Generated Report

   • Security score
   • Vulnerabilities by severity
   • Remediation steps

Security Checks

1. XSS Protection

// ✅ Safe - Angular sanitizes automatically
@Component({
  template: `<div [innerHTML]="content"></div>`
})
export class SafeComponent {
  content = '<p>Safe content</p>';  // Sanitized by Angular
}

// ❌ Dangerous - Bypassing sanitization
@Component({
  template: `<div [innerHTML]="trustedContent"></div>`
})
export class DangerousComponent {
  trustedContent = this.sanitizer.bypassSecurityTrustHtml(userInput);
  // Only bypass for trusted sources!
}

2. CSRF Protection

// ✅ Good - XSRF protection enabled
// app.config.ts
export const appConfig = {
  providers: [
    provideHttpClient(
      withXsrfConfiguration({
        cookieName: 'XSRF-TOKEN',
        headerName: 'X-XSRF-TOKEN'
      })
    )
  ]
};

// ❌ Bad - No CSRF protection
export const appConfig = {
  providers: [
    provideHttpClient() // No XSRF configuration
  ]
};

3. Authentication Security

// ✅ Good - Secure token handling
@Injectable({ providedIn: 'root' })
export class AuthService {
  // Use sessionStorage (not localStorage) for tokens
  private getToken(): string | null {
    return sessionStorage.getItem('token');
  }

  // Check token expiration
  isTokenValid(): boolean {
    const token = this.getToken();
    if (!token) return false;

    try {
      const payload = JSON.parse(atob(token.split('.')[1]));
      return payload.exp * 1000 > Date.now();
    } catch {
      return false;
    }
  }
}

// ❌ Bad - Insecure token storage
localStorage.setItem('token', token);  // Vulnerable to XSS