docs: Change grammatically in security guide (#40995)
Change `controller` reference to `component` reference PR Close #40995
This commit is contained in:
parent
6206d99b86
commit
953e98e211
@ -151,10 +151,10 @@ this, mark the URL value as a trusted URL using the `bypassSecurityTrustUrl` cal
|
|||||||
</div>
|
</div>
|
||||||
|
|
||||||
If you need to convert user input into a trusted value, use a
|
If you need to convert user input into a trusted value, use a
|
||||||
controller method. The following template allows users to enter a YouTube video ID and load the
|
component method. The following template allows users to enter a YouTube video ID and load the
|
||||||
corresponding video in an `<iframe>`. The `<iframe src>` attribute is a resource URL security
|
corresponding video in an `<iframe>`. The `<iframe src>` attribute is a resource URL security
|
||||||
context, because an untrusted source can, for example, smuggle in file downloads that unsuspecting users
|
context, because an untrusted source can, for example, smuggle in file downloads that unsuspecting users
|
||||||
could execute. So call a method on the controller to construct a trusted video URL, which causes
|
could execute. So call a method on the component to construct a trusted video URL, which causes
|
||||||
Angular to allow binding into `<iframe src>`:
|
Angular to allow binding into `<iframe src>`:
|
||||||
|
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user