SecurityContext — Angular

A SecurityContext marks a location that has dangerous security implications, e.g. a DOM property like innerHTML that could cause Cross Site Scripting (XSS) security bugs when improperly handled.

API

enum SecurityContext {
  NONE: SecurityContext.NONE;
  HTML: SecurityContext.HTML;
  STYLE: SecurityContext.STYLE;
  SCRIPT: SecurityContext.SCRIPT;
  URL: SecurityContext.URL;
  RESOURCE_URL: SecurityContext.RESOURCE_URL;
  ATTRIBUTE_NO_BINDING: SecurityContext.ATTRIBUTE_NO_BINDING;
}

NONE

HTML

STYLE

SCRIPT

URL

RESOURCE_URL

ATTRIBUTE_NO_BINDING

Description

A SecurityContext marks a location that has dangerous security implications, e.g. a DOM property like innerHTML that could cause Cross Site Scripting (XSS) security bugs when improperly handled.

See DomSanitizer for more details on security in Angular applications.