How to prevent html injection in Ionic application

Question

I develop a demo app where user can create a post by providing following inputs(ion-input type=“text”).

While testing some user will type some HTML scripting and the result you can see on attached image.

So my question is how can we prevent this type of inputs in ionic ?

Answer 1

What if you displayed the input in the "p" tag like this

<p>{{userPost.longDescription}}</p>

Answer 2

Hello I found out work around solution by simply changing the message(Input value).

It's not a proper solution but in my case it is cool alternative.

Solution for disable HTML or any kind of scripting.

-- Simply replace some basic special symbol to white space which is used while writing a script.

 Example: < > ( ) ' " / \ *; = { } ` (back tick) % + ^! -
 const str = `Click <a href='www.google.com'> here</a> to reset your password`;
console.log(str.replace(/[\\#+$~`":;!=*<>{}]/g, ""));

In my case user not using some symbols for describing problem(Message).