kzgolden-pba

import Ember from 'ember';

export default Ember.Controller.extend({
  appName: 'Ember Twiddle',
  htmlToRender: '',
  actions: {
    loadArbitraryScriptTag() {
      alert('action fired');
      this.set('htmlToRender', Ember.String.htmlSafe('<svg witdth="300" height="300" onclick="alert(\'XSS\');">'));
    }