expression
{{ vm.untrusted }}
ng-bind
w/ ng-non-bindable
{{ vm.untrusted }}
w/ $sanitize
{{ vm.sanitized }}
w/ ng-bind-html
w/ $sanitize & ng-bind-html
w/ $sce.trustAsHtml & ng-bind-html