Limited availability
Note: This feature is available in Web Workers.
The createScriptURL() method of the TrustedTypePolicy interface creates a TrustedScriptURL object using a policy created by TrustedTypePolicyFactory.createPolicy().
createScriptURL(input)
createScriptURL(input, args)
input
A string containing the string to be sanitized by the policy.
args Optional
Additional arguments to be passed to the function represented by TrustedTypePolicy.
A TrustedScriptURL object.
TypeError
Thrown if TrustedTypePolicy does not contain a function to run on the input.
In the below example a string containing the URL to an external resource is used as the input for createScriptURL(). The policy can check that this is an allowed URL before inserting it into an injection sink that could cause this external script to be executed.
const escaped = escapeURLPolicy.createScriptURL(
"https://example.com/my-script.js",
);
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4