The reason that your code isn't working is because the source isn't trusted. In order to get the source to be trusted, you need to use the $sce
service as recommended in this post. If you do that you end up with the following:
Html
<div><iframe ng-src="{{customUrl}}" height="480" width="640"></iframe></div>
Controller
function LoginController($scope, $sce) {
$scope.customUrl = $sce.trustAsResourceUrl('http://www.cnn.com');
}
See the updated fiddle: http://jsfiddle.net/W4WyL/4/
Edit - My original answer said to remove the curly braces. This was completely incorrect. The curly braces are required in ng-src
in order to have the url actually be evaluated. The reason this seemed to work is because code that is part of the template is implicitly trusted while variables are not. That said, the url was absolutely not valid - it just tried to load the name of the variable inside of the current page. Hopefully this will help others in the future that try removing the curly braces!
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…