Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to undo bypassSecurityTrustHtml, i.e convert SafeValue back to string

I am generating html, and inserting it into my web page using

let data = '<font color=blue>hello world</font>';
this.safevalue = this.domSanitizer.bypassSecurityTrustHtml(data);

Elsewhere in my code I want to convert the safe value back into a string, so I tried this...

data = this.safevalue.toString();

but this sets data to a string like this...

'SafeValue must use [property]=binding: (see http://g.co/ng/security#xss)'

which is not helpful

like image 213
John Henckel Avatar asked Oct 26 '17 16:10

John Henckel


1 Answers

I don't know if you already found a fix for this, but, if you just want the original value, marked as safe:

var yourString = this.domSanitizer.sanitize(SecurityContext.HTML, data)
like image 84
DeBorges Avatar answered Oct 20 '22 08:10

DeBorges