I want NOT to escape HTML tag in Angular app

Question

I am newbie of AngularJS. I want NOT to escape HTML tag, so

include angular-sanitize.js
write the code below:

<!-- <div>{{article.content}}</div> --> <div ng-bind-html="{{article.content}}"></div>

But nothing is being rendered.

Have you included sanitize like this: angular.module("myapp", ["ngSanitize"])? — hffmr
– hffmr, Commented Sep 9, 2014 at 9:00

Stu · Accepted Answer · 2014-09-09 09:01:47Z

3

You don't need the braces:

<div ng-bind-html="article.content"></div>

you also need to make sure angular knows that it's safe in your controller:

$sce.trustAsHtml($scope.article.content);

answered Sep 9, 2014 at 9:01

Stu

2,4662 gold badges26 silver badges46 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Benny Bottema Over a year ago

Are you sure $sce is needed if you don't link sources outside the application? The other answer's plunker seems to work fine without.

Stu Over a year ago

True, I'm not sure how - in all the angular docs it says you have to sanitise the output and I've had experience with things that don't work unless you mark them to be trusted. It's possible that it's dependent on what the source is - I was pulling info back from a web service, maybe angular trusts local strings and functions implicitly. That's just my supposition though, not fact.

Benny Bottema · Accepted Answer · 2014-09-09 10:05:13Z

I think this will be help you.

plunker

var app = angular.module('app', ['ngSanitize']); app.controller('appCtrl', ['$scope', '$sce', ctrl]); function ctrl($scope, $sce) { $scope.getContent = function() { return "shohel rana"; }; }

<body ng-controller="appCtrl"> <h1>Hello Plunker!</h1> <div ng-bind-html="getContent()"></div> </body>

Collectives™ on Stack Overflow

I want NOT to escape HTML tag in Angular app

2 Answers 2

2 Comments

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Related