I'm using ng-bind-html to sanitize HTML in a directive template:

<h2><a href="{{ post.url }}" ng-bind-html="post.title"></a></h2>

The compiled output is correct, with one exception, it's not sanitizing the HTML apostrophe which is being printed as â€tm. The page is encoded as charset='utf-8'.

有帮助吗?

解决方案 2

ng-bind-html does a lot for your needs, but to go beyond the basic you should investigate the $sce service

其他提示

I'm not really sure if I understand your question but why don't try escaping the appostrophe with slash? Like

\"

or

\'
许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top