xss-test

components.xss-test.js

import Ember from 'ember';

export default Ember.Component.extend({
  name: Ember.computed(function() {
    return `<h1 style="color: red">pwnd</h1>`;
  }),
  
  xss: Ember.computed(function() {
    return Ember.String.htmlSafe("<b>" + Ember.Handlebars.Utils.escapeExpression(this.get('name')) + "</b>");
  })
});

controllers.application.js

import Ember from 'ember';

export default Ember.Controller.extend({
  appName: 'Ember Twiddle'
});

templates.application.hbs

<h1>Welcome to {{appName}}</h1>
<br>
<br>
{{xss-test}}
<br>
<br>

templates.components.xss-test.hbs

{{xss}}

twiddle.json

{
  "version": "0.12.1",
  "EmberENV": {
    "FEATURES": {}
  },
  "options": {
    "use_pods": false,
    "enable-testing": false
  },
  "dependencies": {
    "jquery": "https://cdnjs.cloudflare.com/ajax/libs/jquery/1.11.3/jquery.js",
    "ember": "2.12.0",
    "ember-template-compiler": "2.12.0",
    "ember-testing": "2.12.0"
  },
  "addons": {
    "ember-data": "2.12.1"
  }
}