Trusted Types API

Checking compatibility...

The Trusted Types API helps prevent cross-site scripting (XSS) attacks by providing a secure way to create and validate strings that could contain executable code before inserting them into DOM sinks that can execute JavaScript.

Browser Support

Trusted Types API requires a secure context (HTTPS) and is not supported in all browsers. Check browser compatibility before using in production.

Creating a Trusted Types Policy

Set up rules for validating and sanitizing content before it reaches sensitive browser functions. This example shows how to create a policy that automatically removes dangerous elements from HTML strings, preventing attackers from injecting malicious scripts through user input or third-party content.

=
=
=
=
=
=

Output

Click Run to see output...