Comments (4)
So {{something}} is not working inside message because of $sce correct?
from angular-toastr.
Allowing HTML is problematic, there is no perfect solution.
There are various options and I decided for one. Allowing basic html on it, but that doesn't support angular directives and to do that, I need to make the toasts really insecure.
I think that since it is just to popup information, it doesn't need complex stuff on it.
So for now, I want to wait to see how people use it and then act.
from angular-toastr.
I understand you decision. Our use-case is to display a countdown in a popup message or something to show the user that he is getting logged out by inactivity. So we decided to use a non blocking toast message for that. But without angular binding there is only the option to show multiple toasts every x seconds/minutes etc. to give the desired behavior.
Having a insecure toast is no problem in our case, so we may deactivate sce for our site, but we must discuss it again as the site could get online on some day (its an intranet website). Then we would maybe use a modal or just a countdown in one part of the layout.
from angular-toastr.
i got $sce warning with
AngularJS v1.5.7
toastr 2.1.1
(not validate)
my intention enabling html just using
it work on http success callback with toastr.success
and it's throw $sce error on fail callback when interact with responseError.status
, even with no html
and it work fine when not interact with responseError.status
from angular-toastr.
Related Issues (20)
- angular-toastr.tpls.js contains the entire source code HOT 1
- Stacking toasts using custom template
- how to add fadeOut and fadeIn HOT 1
- progressBar option disappearing and starting all over again HOT 2
- Using extraData for ng-click with custom template
- toastr.clear() and toastr.active() don't work! HOT 1
- trustAsHtml used for title and message -XSS Attack
- Repo Name Change HOT 1
- Explicit 3rd parameter doesn't override default behavior which declared in toasrConfig file HOT 2
- styling missmatch when using containerId option
- Parameters for duration configuration HOT 1
- unable to use ng-click HOT 1
- Setting extendedTimeOut to zero, toastr still dismisses after hover HOT 2
- Change width of toast in a controller
- allowHtml prone to XSS-Vulnerabilities HOT 5
- Messages are not styled HOT 1
- x
- I need help with toast-bottom-full-width.
- Second argument is necessary in order for options to be read
- Failed to load template toast.html
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from angular-toastr.