html - Angular 6 iframe 绑定(bind)

Question

有一个变量存储iframe代码。 我想将其绑定(bind)到一个 div 中，但没有任何效果。

HTML:

<div class="top-image" [innerHTML]="yt"></div>

:

yt = '<iframe class="w-100" src="https://www.youtube.com/embed/KS76EghdCcY?rel=0&amp;controls=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>';

解决方案是什么？

Answer 1

您可能会收到一条警告，指出它是不安全的 HTML。这就是 Angular 不在 div 中呈现它的原因。

你必须DomSanitize它:

<div class="top-image" [innerHTML]="yt | safe: 'html'"></div>

这是管道 courtesy Swarna Kishore .

import { Pipe, PipeTransform } from '@angular/core';
import { DomSanitizer, SafeHtml, SafeStyle, SafeScript, SafeUrl, SafeResourceUrl } from '@angular/platform-browser';

@Pipe({
  name: 'safe'
})
export class SafePipe implements PipeTransform {

  constructor(protected sanitizer: DomSanitizer) {}

  public transform(value: any, type: string): SafeHtml | SafeStyle | SafeScript | SafeUrl | SafeResourceUrl {
    switch (type) {
      case 'html':
        return this.sanitizer.bypassSecurityTrustHtml(value);
      case 'style':
        return this.sanitizer.bypassSecurityTrustStyle(value);
      case 'script':
        return this.sanitizer.bypassSecurityTrustScript(value);
      case 'url':
        return this.sanitizer.bypassSecurityTrustUrl(value);
      case 'resourceUrl':
        return this.sanitizer.bypassSecurityTrustResourceUrl(value);
      default:
        throw new Error(`Invalid safe type specified: ${type}`);
    }
  }
}

这是一个 Sample StackBlitz .