Angular 2，DomSanitizer，bypassSecurityTrustHtml，SVG

Question

我一直在使用DomSanitizer和一個html字符串中的SVG。

此之前的角當前的版本中，這個工作就好了：

this.domSanitizer.bypassSecurityTrustHtml(content);

現在我又回到叫

SafeHtmlImpl {changingThisBreaksApplicationSecurity: "<svg> blah </svg>"} 
changingThisBreaksApplicationSecurity 

對象現在是否有訪問的新途徑DomSanitizer的輸出？我應該將它作爲SafeHTML類型還是什麼？如果bypassSecurityTrustHtml仍然過濾HTML，那麼它有什麼意義？

任何明信片上的答案？請...

Answer 1

DEMO：https://plnkr.co/edit/Qke2jktna55h40ubUl8o?p=preview

import { DomSanitizer } from '@angular/platform-browser' 

@Pipe({ name: 'safeHtml'}) 
export class SafeHtmlPipe implements PipeTransform { 
    constructor(private sanitized: DomSanitizer) {} 
    transform(value) { 
    console.log(this.sanitized.bypassSecurityTrustHtml(value)) 
    return this.sanitized.bypassSecurityTrustHtml(value); 
    } 
} 

@Component({ 
    selector: 'my-app', 
    template: ` 
    <div [innerHtml]="html | safeHtml"> 
    </div> 
    `, 
}) 
export class App { 
    name:string; 
    html: safeHtml; 
    constructor() { 
    this.name = 'Angular2' 
    this.html = "<svg> blah </svg>"; 
    } 
} 

Answer 2

使用DomSanitizer.bypassSecurityTrustHtml：

constructor(private sanitizer: DomSanitizer) { 
} 

let html = this.sanitizer.bypassSecurityTrustHtml("<svg> blah </svg>"); 

的更多信息：https://angular.io/docs/ts/latest/guide/security.html#bypass-security-apis