| <!doctype html> |
| <html lang="en"> |
| <head> |
| <meta charset="UTF-8"> |
| <title>Example - example-example63</title> |
| |
| |
| <script src="../../../angular.min.js"></script> |
| <script src="../../../angular-sanitize.js"></script> |
| <script src="script.js"></script> |
| |
| |
| |
| </head> |
| <body ng-app="mySceApp"> |
| <div ng-controller="myAppController as myCtrl"> |
| <i ng-bind-html="myCtrl.explicitlyTrustedHtml" id="explicitlyTrustedHtml"></i><br><br> |
| <b>User comments</b><br> |
| By default, HTML that isn't explicitly trusted (e.g. Alice's comment) is sanitized when |
| $sanitize is available. If $sanitize isn't available, this results in an error instead of an |
| exploit. |
| <div class="well"> |
| <div ng-repeat="userComment in myCtrl.userComments"> |
| <b>{{userComment.name}}</b>: |
| <span ng-bind-html="userComment.htmlComment" class="htmlComment"></span> |
| <br> |
| </div> |
| </div> |
| </div> |
| </body> |
| </html> |
