javascript - Angular 5 阻止 iframe 谷歌地图

Question

我有以下 iframe

<iframe
  width="600"
  height="450"
  frameborder="0" style="border:0"
  [src]="mapsurl" allowfullscreen>
</iframe>

mapsurl 是安全 URL (https)

我收到以下错误:

ERROR Error: unsafe value used in a resource URL context (see http://g.co/ng/security#xss) at DomSanitizerImpl.webpackJsonp.../../../platform-browser/esm5/platform-browser.js.DomSanitizerImpl.sanitize

我检查了一些资源。 Angular 文档像往常一样令人难以忍受。我正在继续研究，将用调查结果编辑问题。最好有任何帮助。

Answer 1

使用DomSanitizer

   import { DomSanitizer } from '@angular/platform-browser';

   constructor(public sanitizer: DomSanitizer){}

然后在 HTML 中:

    <iframe [src]='sanitizer.bypassSecurityTrustResourceUrl(mapsurl)'  width="600"
  height="450"
  frameborder="0" style="border:0"
  allowfullscreen>
    </iframe>