Activity Forums Salesforce® Discussions What aura:unescapedHtml? 

  • Nikita

    Member
    October 14, 2019 at 12:01 pm

    Hi,

    The value assigned to this component will be rendered as-is, without altering its contents. It's intended for outputting pre-formatted HTML, for example, where the formatting is arbitrary, or expensive to calculate. The body of this component is ignored, and won't be rendered. Warning: this component outputs value as unescaped HTML, which introduces the possibility of security vulnerabilities in your code. You must sanitize user input before rendering it unescaped, or you will create a cross-site scripting (XSS) vulnerability. Only use <aura:unescapedHtml> with trusted or sanitized sources of data.

Log In to reply.

Popular Salesforce Blogs

Popular Salesforce Videos