705d8c50fd
- App now shows how Angular handles untrusted URLs and resources - E2e test covered new functionality - Copyedits to prose - Updated provider expressions to use latest syntax The original security feature tracker: https://github.com/angular/angular/issues/8511
14 lines
391 B
TypeScript
14 lines
391 B
TypeScript
// #docregion
|
|
import { Component } from '@angular/core';
|
|
|
|
@Component({
|
|
moduleId: module.id,
|
|
selector: 'inner-html-binding',
|
|
templateUrl: 'inner-html-binding.component.html',
|
|
})
|
|
// #docregion inner-html-controller
|
|
export class InnerHtmlBindingComponent {
|
|
// E.g. a user/attacker controlled value from a URL.
|
|
htmlSnippet = 'Template <script>alert("0wned")</script> <b>Syntax</b>';
|
|
}
|