In versions prior to 1.6, Angular limited access to certain parts of JavaScript within Angular expressions. Starting with Angular 1.6, this sandbox has been removed. We will review what this sandbox did and did not do for you pre-1.6, and what you need to know to keep your code safe from exploitation.