通过 signal input 的 transform
+ DomSanitizer.bypassSecurityTrustHtml
解决了
export class HtmlContentComponent {
sanitizer = inject(DomSanitizer);
appContent = input('', {
transform: (html: string) => this.sanitizer.bypassSecurityTrustHtml(html),
});
}
github 上的相关 issue:DomSanitizer should keep style attributes in HTML but sanitize them if needed