Angular-SCE / encodeURI / sanitize examples

Angular-SCE / encodeURI / sanitize examples

HTML

<script src="https://code.angularjs.org/1.2.25/angular-sanitize.js"></script>
<div ng-app="app" ng-controller="Ctrl">

  <div ng-bind-html="html"></div>
  <hr>
  <b>Using encodeURIComponent</b> -->
  <div ng-bind-html="andrew"></div>
  <hr>
  <b>Using $sanitize</b> -->
  <div ng-bind-html="pougher"></div>
  <hr> {{pougher}}
  <hr>
</div>
<script>
	/* http://bit.ly/ARP71 */
  (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
  (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
  m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
  })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

  ga('create', 'UA-4809804-1', 'auto');
  ga('send', 'pageview');
  </script>

JavaScript

var pp = angular.module('app', ['ngSanitize']);

pp.controller('Ctrl', function($scope, $sanitize, $sce) {
  $scope.html = '&quot;12.10 bla bla bla  &quot;&quot;Made Up&quot;&quot; Samples.&quot;<code>code tags</code>';

  var wordstotest = "<svg onload=alert()>";
  $scope.andrew = (encodeURIComponent(wordstotest));
  $scope.pougher = ($sanitize(wordstotest));
});