how to make textangulars insert html allow usage of iframe

Question

Textangular library uses angular-sanitize to sanitise text. I want to be able to insert iframe tags with youtube videos to support embedding videos.

How can I make angular-sanitize allow iframe tags?

score 0 · Answer 1 · answered Jul 12 '14 at 03:40

0

I'm not familiar with Textangular but if you don't want Angular to sanitize you can use: $sce.trustAsHtml()

answered Jul 12 '14 at 03:40

Nick

1

don't do this if the iframe is part of user data or else you will have an xss vector – Pyrolistical Oct 04 '17 at 02:48

score 0 · Answer 2 · edited May 23 '17 at 12:21

0

TextAngular uses custom renderers to use a placeholder img while editing, then we convert it to an iFrame for display. See how to strip placeholder img in textAngular editor in scope var?. Also we have a youtube button in the toolbar.

edited May 23 '17 at 12:21

Community

answered Jul 30 '14 at 00:54

Simeon Cheeseman

2 Answers2