Injecting a script tag with ngBindHtml

Question

I have external API data which is a user generated content. The client wants to dynamically update his own site with this feed, including the ability to use JavaScript.

<div ng-bind-html="post.content"></div>

Will display anything that is HTML or CSS but does not work with JavaScript:

"content":"<div>Hello Stack</div><script>alert('whats up?');</script>"

I have tried including ngSanitize as well as using ng-bind-html-unsafe.

No dice.

Community · Accepted Answer · 2017-05-23 11:50:30Z

6

You have to include jQuery for this to work.

After some searching I came across https://stackoverflow.com/a/14088380/1264846.

Example plunkr: http://plnkr.co/edit/zEXXCB459Tp25VJiyyZb?p=preview

edited May 23, 2017 at 11:50

CommunityBot

11 silver badge

answered Jul 4, 2013 at 3:06

James Kleeh

12.2k5 gold badges38 silver badges61 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Dan Kanze Over a year ago

+1 It works. But that is rediculous. They call support for this "black magic" haha.

Collectives™ on Stack Overflow

Injecting a script tag with ngBindHtml

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related