(element: HTMLElement, html: SafeHtml, sanitizer: DomSanitizer)
| 16 | |
| 17 | /** Sanitizes and sets the `innerHTML` of an element. */ |
| 18 | export function _setInnerHtml(element: HTMLElement, html: SafeHtml, sanitizer: DomSanitizer): void { |
| 19 | const cleanHtml = sanitizer.sanitize(SecurityContext.HTML, html); |
| 20 | |
| 21 | if (cleanHtml === null && (typeof ngDevMode === 'undefined' || ngDevMode)) { |
| 22 | throw new Error(`Could not sanitize HTML: ${html}`); |
| 23 | } |
| 24 | |
| 25 | element.innerHTML = trustedHTMLFromString(cleanHtml || '') as unknown as string; |
| 26 | } |
no test coverage detected