JavaScript trustedTypes API
The trustedTypes API provides a way for JavaScript developers to safely pass data to risky methods such as
innerHTML, outerHTML, or document.write() by marking it as trusted.
trustedTypes methods
The window.trustedTypes object is an instance of a TrustedTypePolicyFactory object.
| Method Name | Returns | Description |
|---|---|---|
createPolicy(policyName, policyOptions) |
TrustedTypePolicy |
Creates a trusted type policy object with the given policyName. The policyOptions is an object you define with any of the following functions:createHTML(input[,args]) - transforms the input string and returns a TrustedHTML object.createScript(input[,args]) - transforms the input string and returns a TrustedScript object.createScriptURL(input[,args]) - transforms the input string and returns a TrustedScriptURL object.The createPolicy method may throw a TypeError if the policyName is restricted by CSP trusted-types directive.
|
isHTML(value) |
boolean |
Returns true if the value is a TrustedHTML object. |
isScript(value) |
boolean |
Returns true if the value is a TrustedScript object. |
isScriptURL(value) |
boolean |
Returns true if the value is a TrustedScriptURL object. |
