Search code examples
angularjsng-bind-html

AngularJS 1.2.0 ngBindHtml and trustAsHtml not working with ngModel


I feel like this should be really easy since I had it working perfectly with Angular 1.0.8 using ngBindHtmlUnsafe. I read on the API docs and on StackOverflow that I need to use $sce.trustAsHtml() with ngBindHtml now but I cannot seem to get it to work.

This is basically the format I am using given what I read:

var myApp = angular.module('myApp', []);

function myController($scope, $sce){
    $scope.myHtml = $sce.trustAsHtml($scope.sourceText);
}

html:

<html ng-app="myApp">

  <head>
    <script data-require="[email protected]" data-semver="1.2.0-rc3-nonmin" src="http://code.angularjs.org/1.2.0-rc.3/angular.js"></script>
    <link rel="stylesheet" href="style.css" />
    <script src="script.js"></script>
  </head>

  <body>
    <div ng-controller="myController">
      <textarea ng-model="sourceText"></textarea>

      <div ng-bind-html="myHtml"></div>
    </div>
  </body>

</html>

I thought it would be this straightforward but I must be wrong and missing something.

I dropped this simple example to a Plunker: http://plnkr.co/edit/ZX4dONBlzv1X8BcO1IBV?p=preview


Solution

  • Is this what you're looking for? http://plnkr.co/edit/IZkzsuKHvbYiyV07CGqp

    // would strongly suggest including sanitize in your scripts and injecting it
    // into your app here to prevent "unsafe as safe" errors
    var myApp = angular.module('myApp', ['ngSanitize']);
    
    myApp.controller('myController', ['$scope', '$sce', function myController($scope, $sce){
      $scope.myHtml = "initial";  //not needed, for testing
    
      $scope.changeText = function() {
        $scope.myHtml = $sce.trustAsHtml($scope.sourceText);
      }
    }]);
    

    Html:

      <head>
        <script data-require="[email protected]" data-semver="1.2.0-rc3-nonmin" src="http://code.angularjs.org/1.2.0-rc.3/angular.js"></script>
        <script src="http://code.angularjs.org/1.2.0-rc.3/angular-sanitize.min.js"></script>
        <link rel="stylesheet" href="style.css" />
        <script src="script.js"></script>
      </head>
    
      <body>
        <div ng-controller="myController">
          <textarea ng-model="sourceText" ng-change="changeText()"></textarea>
    
          <div ng-bind-html="myHtml"></div>
        </div>
      </body>
    
    </html>