angular.js - angularJs 中渲染模版时如何避免 XSS？

Question

实用 angularJs 如何避免渲染的数据中有不安全的标签？

Answer 1

By default, they have been filtered, so you don’t have to worry.

Unless you manually configure it through ngSanitize, you can change this default behavior.

Answer 2

Introduce ngSanitize 模块后用 directive ngBindHtml, such as:

<p ng-bind-html="binding.html"></p>