Angular - Strip all tags from inputs

Question

In my Angular app, I want to sanitise any inputs to strip any/all tags, so even if a user entered <h1>superman</h1> the html tags would be stripped.

Now I've read about ngSanitize however on this docs page https://docs.angularjs.org/api/ngSanitize/service/$sanitize it mentions whitelist, so I presume that means Angular would accept things like <h1>.

Is my understanding in this correct?

And if so, how do i forcefully remove any and all tags from any input?

Thanks.

rgvassar · Accepted Answer · 2016-04-01 21:53:40Z

5

ngSanitize simply makes html safe, so it can't run javascript inside. You'd probably want to use the simple javascript replace method with a regex here.

something like:

var str = '<h1>superman</h1>';
str.replace(/<[^>]+>/g, '');

This would remove any XML tags, not just html.

answered Apr 1, 2016 at 21:53

rgvassar

5,8612 gold badges27 silver badges32 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

userMod2 Over a year ago

Cool - makes sense. So why doesnt Angular offer something like this out of the box as well? Isn't it important for things like username input fields where one would never really expect html to be entered?

rgvassar Over a year ago

They just can't implement everything a user might want to do. That's why they have filters. You can implement your own custom filter that can do this if you want.

S4beR · Accepted Answer · 2016-04-01 21:59:29Z

0

please refer to this plnkr example https://plnkr.co/edit/F9K3sekUQUJPBUts8Jdw?p=preview

var strip = function() {
   var tmp = document.createElement("DIV");
   tmp.innerHTML = $scope.strip; // assuming text box is using "strip" for ng-model
   return tmp.textContent || tmp.innerText || "";
};

It can be done with simple Javascript. No need for ngSanitize or any other angularjs specific code.

edited Apr 1, 2016 at 21:59

answered Apr 1, 2016 at 21:53

S4beR

1,8471 gold badge18 silver badges33 bronze badges

1 Comment

userMod2 Over a year ago

Thanks - I can see how this works, however will go for the above, easier for me to read :-). Thanks again, appreciated

Collectives™ on Stack Overflow

Angular - Strip all tags from inputs

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related