diff options
Diffstat (limited to 'docs/content/error/$sce/unsafe.ngdoc')
| -rw-r--r-- | docs/content/error/$sce/unsafe.ngdoc | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/docs/content/error/$sce/unsafe.ngdoc b/docs/content/error/$sce/unsafe.ngdoc new file mode 100644 index 00000000..fdddf61b --- /dev/null +++ b/docs/content/error/$sce/unsafe.ngdoc @@ -0,0 +1,15 @@ +@ngdoc error +@name $sce:unsafe +@fullName Require a safe/trusted value +@description + +The value provided for use in a specific context was not found to be safe/trusted for use. + +Angular's {@link ng.$sce Strict Contextual Escaping (SCE)} mode +(enabled by default), requires bindings in certain +contexts to result in a value that is trusted as safe for use in such a context. (e.g. loading an +Angular template from a URL requires that the URL is one considered safe for loading resources.) + +This helps prevent XSS and other security issues. Read more at {@link +api/ng.$sce Strict Contextual Escaping (SCE)} + |