Angular 2 - EXCEPTION:错误:资源URL上下文中使用的不安全值

Pet*_*ete 25 javascript typescript angular

我收到以下错误:

Angular 2 - EXCEPTION:错误:资源URL上下文中使用的不安全值

是否与在启动时不立即使用媒体项目有关?或者它与URL不安全有关?我正在努力消毒它.

export class HomeComponent {

  sanitizer: DomSanitizationService;
  errorMessage: string;
  activeMedia: MediaItem = new MediaItem(0, '', '', '', '', '', '');

  constructor(
    private mediaStorage: MediaStorageService, 
    private harvesterService: HarvesterService, 
    sanitizer: DomSanitizationService) {

    this.sanitizer = sanitizer;
    // Initial call - 
    harvesterService.getMediaItems(10, 'type', 'category');
    let subscription = harvesterService.initialMediaHarvestedEvent.subscribe(() => {
      this.activeMedia = mediaStorage.mediaList[0];
      let newURL = this.activeMedia.URL + '?rel=0&autoplay=1';
      newURL = newURL.replace('watch?v=', 'v/');
      this.activeMedia.URL = newURL; //sanitizer.bypassSecurityTrustUrl(newURL);
      console.log(newURL);
    });
  }

  cleanURL(oldURL: string): SafeResourceUrl {
    return this.sanitizer.bypassSecurityTrustUrl(oldURL);
  }
}
Run Code Online (Sandbox Code Playgroud)

模板代码是:

<div class="row" >
    <iframe 
      id="video"  
      class="video" 
      src="{{ cleanURL(activeMedia.URL) }}" 
      frameborder="0" 
      allowfullscreen>
    </iframe>
</div>
Run Code Online (Sandbox Code Playgroud)

Pet*_*ete 76

更新:改变之后

 src="{{cleanURL(activeMedia.URL)}}"
Run Code Online (Sandbox Code Playgroud)

至:

 [src]="cleanURL(activeMedia.URL)"
Run Code Online (Sandbox Code Playgroud)

我得到:ORIGINAL EXCEPTION:错误:需要一个安全的ResourceURL,有一个URL

通过将cleanURL方法中的代码更改为:

 return this.sanitizer.bypassSecurityTrustResourceUrl(oldURL);
Run Code Online (Sandbox Code Playgroud)

代替:

 return this.sanitizer.bypassSecurityTrustUrl(oldURL);
Run Code Online (Sandbox Code Playgroud)

  • 不要作为函数运行,保持值持久不评估 (2认同)