Angular 1.4 include XSS type vectors and arbitrary code execution sees (https://snyk.io/test/npm/angular/1.4.0?severity=high&severity=medium&severity=low).