Limited availability
Note: This feature is available in Web Workers.
The createScript()
method of the TrustedTypePolicy
interface creates a TrustedScript
object using a policy created by TrustedTypePolicyFactory.createPolicy()
.
createScript(input)
createScript(input, args)
Parameters
input
A string containing the string to be sanitized by the policy.
args
Optional
Additional arguments to be passed to the function represented by TrustedTypePolicy
.
A TrustedScript
object.
TypeError
Thrown if TrustedTypePolicy
does not contain a function to run on the input.
In the below example a string containing a potentially risky script is used as the input for createScript()
. The policy can sanitize this script before inserting it into an injection sink that could cause it to be executed.
const sanitized = scriptPolicy.createScript("eval('2 + 2')");
Specifications Browser compatibility
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4