W3cubDocs

Improve this Doc ngSanitize

Installation

First include angular-sanitize.js in your HTML:

<script src="angular.js">
<script src="angular-sanitize.js">

You can download this file from the following places:

Google CDN
e.g. //ajax.googleapis.com/ajax/libs/angularjs/X.Y.Z/angular-sanitize.js
Bower
e.g.
```
bower install [email protected]
```

code.angularjs.org
e.g.

"//code.angularjs.org/X.Y.Z/angular-sanitize.js"

where X.Y.Z is the AngularJS version you are running.

Then load the module in your application by adding it as a dependent module:

angular.module('app', ['ngSanitize']);

With that you're ready to get started!

ngSanitize

The ngSanitize module provides functionality to sanitize HTML.

See $sanitize for usage.

Module Components

Filter

Name	Description
linky	Finds links in text input and turns them into html links. Supports http/https/ftp/mailto and plain email address links.

Service

Name Description

Name	Description
$sanitize	The input is sanitized by parsing the HTML into tokens. All safe tokens (from a whitelist) are then serialized back to properly escaped html string. This means that no unsafe input can make it into the returned string, however, since our parser is more strict than a typical browser parser, it's possible that some obscure input, which would be recognized as valid HTML by a browser, won't make it through the sanitizer. The input may also contain SVG markup. The whitelist is configured using the functions `aHrefSanitizationWhitelist` and `imgSrcSanitizationWhitelist` of `$compileProvider`.

$sanitize

The input is sanitized by parsing the HTML into tokens. All safe tokens (from a whitelist) are then serialized back to properly escaped html string. This means that no unsafe input can make it into the returned string, however, since our parser is more strict than a typical browser parser, it's possible that some obscure input, which would be recognized as valid HTML by a browser, won't make it through the sanitizer. The input may also contain SVG markup. The whitelist is configured using the functions aHrefSanitizationWhitelist and imgSrcSanitizationWhitelist of $compileProvider.

© 2010–2016 Google, Inc.
Licensed under the Creative Commons Attribution License 4.0.
https://code.angularjs.org/1.4.14/docs/api/ngSanitize