From b611436d8e220d4168e408523725500ea436045e Mon Sep 17 00:00:00 2001 From: Liam DeBeasi Date: Tue, 11 Apr 2023 15:00:25 -0400 Subject: [PATCH 1/2] Update security.md --- docs/techniques/security.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/techniques/security.md b/docs/techniques/security.md index 4528b69ec1..e46a8273b8 100644 --- a/docs/techniques/security.md +++ b/docs/techniques/security.md @@ -82,6 +82,10 @@ Ionic Framework provides an application config option called `sanitizerEnabled` Developers can also choose to eject from the sanitizer in certain scenarios. Ionic Framework provides the `IonicSafeString` class that allows developers to do just that. +:::note +In order to bypass the sanitizer and use custom HTML in the relevant Ionic components, `innerHTMLTemplatesEnabled` must be set to `true` in the Ionic config. See [Enabling Custom HTML Parsing](#enabling-custom-html-parsing-via-innerhtml) for more information. +::: + #### Usage ````mdx-code-block From 6eb348fa69105ac405da67146830b21cac4744d9 Mon Sep 17 00:00:00 2001 From: Liam DeBeasi Date: Tue, 11 Apr 2023 15:06:40 -0400 Subject: [PATCH 2/2] Update security.md --- docs/techniques/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/techniques/security.md b/docs/techniques/security.md index e46a8273b8..b145665cfe 100644 --- a/docs/techniques/security.md +++ b/docs/techniques/security.md @@ -83,7 +83,7 @@ Ionic Framework provides an application config option called `sanitizerEnabled` Developers can also choose to eject from the sanitizer in certain scenarios. Ionic Framework provides the `IonicSafeString` class that allows developers to do just that. :::note -In order to bypass the sanitizer and use custom HTML in the relevant Ionic components, `innerHTMLTemplatesEnabled` must be set to `true` in the Ionic config. See [Enabling Custom HTML Parsing](#enabling-custom-html-parsing-via-innerhtml) for more information. +In order to bypass the sanitizer and use unsanitized custom HTML in the relevant Ionic components, `innerHTMLTemplatesEnabled` must be set to `true` in the Ionic config. See [Enabling Custom HTML Parsing](#enabling-custom-html-parsing-via-innerhtml) for more information. ::: #### Usage