AngularJS ngBindHtml sanitization problem

by Suvroc

HTML

<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.1.1/angular-sanitize.min.js"></script>
<div ng-app="myApp" ng-controller="MainCtrl">
    <div ng-bind-html="text"></div>
</div>

JavaScript

var app = angular.module('myApp', ['ngSanitize']);

app.controller('MainCtrl', function ($sce, $scope) {
    $scope.text = " <script>alert(222)</script> <script>alert(222)</script>";
});

app.config(function($provide){
    $provide.decorator("$sanitize", function($delegate, $log){
        return function(text, target){
 
            var result = $delegate(text, target);
            $log.info("$sanitize input: " + text);
            $log.info("$sanitize output: " + result);
 
            return result;
        };
    });
});