I'm playing with bypassSecurityTrust* functions of Angular. Goal is to get a script tag to execute on the page. But it either keeps sanitizing with the message

WARNING: sanitizing HTML stripped some content

or I see in the console a

SafeHtmlImpl {changingThisBreaksApplicationSecurity: <script>alert(1)</script>.

Goal is to get this working.

What I currently use and tried:

@Pipe({ name: 'safeHtml'})

export class SafeHtmlPipe implements PipeTransform  {

  constructor(private sanitized: DomSanitizer) {}

  transform(value: string): string {

    console.log(this.sanitized.sanitize(SecurityContext.NONE, value))

    return this.sanitized.sanitize(SecurityContext.NONE, value);

  }

}

@Component({

  selector: 'app-demo',

  templateUrl: './demo.component.html',

  styleUrls: ['./demo.component.css']

})

export class DemoComponent implements OnInit {



  name: string;

  html: string;

  constructor(private sanitizer: DomSanitizer) {

    this.name = 'Angular2';

    this.html = <script> alert(8) </script>;

  }

  ngOnInit() {

  }

}

and the template html:

<div [innerHtml]=html | safeHtml></div>

I tried both sanitize with SecurityContext.NONE which should work looking at the code and bypassSecurityTrustHtml(value). The above code was inspired by this answer.

Any ideas on how to execute that JavaScript?