Angular 2 - Textarea sanitization?

Asked Oct 11 '18 at 10:00

Active Oct 11 '18 at 10:00

Viewed 1,027 times

I really dont understand this, the domsanitizer is destroying html in my textarea

I want to bypass the sanitisation, so I use this

this.product['name_fr'] = this.domSanitizer.bypassSecurityTrustHtml(this.product['name_fr']);

but in my textarea

<input class="productNameInput" [(ngModel)]="product.name_fr" [formControl]="nameValidatorFr"/>

this appears

SafeValue must use [property]=binding: fds fds fds fds ds (see http://g.co/ng/security#xss)

and in DB my string is stored empty

can someone enlight me on this ? I want to KEEP html intact

thanks

asked Oct 11 '18 at 10:00

phil123456

https://stackoverflow.com/questions/45351434/safe-value-must-use-property-binding-after-bypass-security-with-domsanitizer – Chellappan வ Oct 11 '18 at 10:05
I already read that, it does not seem related, I iuse a textarea, so an ngModel – phil123456 Oct 11 '18 at 10:18
are you trying to put html inside textarea? – Chellappan வ Oct 11 '18 at 10:23
no, I use an ngModel , see the code above...when I click on a save button, I do this.product['name_fr'] = this.domSanitizer.bypassSecurityTrustHtml(this.product['name_fr']); – phil123456 Oct 11 '18 at 11:41
try this this.product ={ name_fr:this.domSanitizer.bypassSecurityTrustHtml(this.product['name_fr'])}; – Chellappan வ Oct 11 '18 at 11:50
I already do this this.product['name_fr'] = this.domSanitizer.bypassSecurityTrustHtml(this.product['name_fr']); – phil123456 Oct 15 '18 at 11:12

0 Answers0