Skip to content

Commit 92424ff

Browse files
authored
docs(security): clarify IonicSafeString usage with innerHTMLTemplatesEnabled (#2906)
1 parent ea506a9 commit 92424ff

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/techniques/security.md

+4
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,10 @@ Ionic Framework provides an application config option called `sanitizerEnabled`
8282

8383
Developers can also choose to eject from the sanitizer in certain scenarios. Ionic Framework provides the `IonicSafeString` class that allows developers to do just that.
8484

85+
:::note
86+
In order to bypass the sanitizer and use unsanitized custom HTML in the relevant Ionic components, `innerHTMLTemplatesEnabled` must be set to `true` in the Ionic config. See [Enabling Custom HTML Parsing](#enabling-custom-html-parsing-via-innerhtml) for more information.
87+
:::
88+
8589
#### Usage
8690

8791
````mdx-code-block

0 commit comments

Comments
 (0)