From f39f1169847f590b390249827892d65ea5c22944 Mon Sep 17 00:00:00 2001 From: Dave Goodchild Date: Tue, 7 Nov 2017 09:06:54 +0100 Subject: [PATCH 1/2] Update index.md Adding a tip relating to the fact that v-html content is unaffected by scoped styling, and explaining an example way around it. --- src/v2/api/index.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/v2/api/index.md b/src/v2/api/index.md index 33abc848f7..0b79040387 100644 --- a/src/v2/api/index.md +++ b/src/v2/api/index.md @@ -1686,6 +1686,8 @@ type: api

Dynamically rendering arbitrary HTML on your website can be very dangerous because it can easily lead to [XSS attacks](https://en.wikipedia.org/wiki/Cross-site_scripting). Only use `v-html` on trusted content and **never** on user-provided content.

+

Using `scoped` styles will not work with this directive because the content isn't created by Vue's rendering system, it simply uses `innerHTML`. Instead, if you are using Vue template files, you can define multiple `