angular.js - How to avoid XSS when rendering templates in angularJs?

Question

Practical angularJs How to avoid unsafe tags in rendered data?

Answer 1

By default, they have been filtered, so you don’t have to worry.

Unless you manually configure it through ngSanitize, you can change this default behavior.

Answer 2

Introduce ngSanitize 模块后用 directive ngBindHtml, such as:

<p ng-bind-html="binding.html"></p>