Ampersand (&) handling in user data

[rahul-desai3]

If I am sanitizing user text input &XYZ&, it gets converted to &XYZ&.

Any pointers on how to fix this?

[mominrazashahid]

I am also facing issue string contain > which converted to > any solution or I can de sanitize on front end ? I don't want to remove sanisation.

[mominrazashahid]

I fixed this in angular by using Angular sanitize pipe.

import { Pipe, PipeTransform } from '@angular/core';
import { DomSanitizer, SafeHtml } from '@angular/platform-browser';

@Pipe({ name: 'sanitizeHtml' })
export class SanitizeHtmlPipe implements PipeTransform {

  constructor(private _sanitizer: DomSanitizer) { }

  transform(value: string): SafeHtml {
    return this._sanitizer.bypassSecurityTrustHtml(value);
  }

}

in .html file

<span [innerHTML]="specialist | sanitizeHtml"></span>