Limited availability
Note: This feature is available in Web Workers.
The createHTML() method of the TrustedTypePolicy interface creates a TrustedHTML object using a policy created by TrustedTypePolicyFactory.createPolicy().
createHTML(input)
createHTML(input, args)
input
A string containing the string to be sanitized by the policy.
args Optional
Additional arguments to be passed to the function represented by TrustedTypePolicy.
A TrustedHTML object.
TypeError
Thrown if TrustedTypePolicy does not contain a function to run on the input.
In the below example a string containing a potentially dangerous script is used as the input for createHTML(). Dangerous code inserted by a user could then be sanitized before insertion into any injection sink.
const escaped = escapeHTMLPolicy.createHTML("<img src=x onerror=alert(1)>");
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4