bindings/trusted_types library
Trusted Types
Classes
- TrustedHTML
-
The interface of the
Trusted Types API
represents a string that a developer can insert into an injection sink that will render it as HTML. These objects are created viaTrustedTypePolicy.createHTML()
and therefore have no constructor. The value of a TrustedHTML object is set when the object is created and cannot be changed by JavaScript as there is no setter exposed. - TrustedScript
-
The interface of the
Trusted Types API
represents a string with an uncompiled script body that a developer can insert into an injection sink that might execute the script. These objects are created viaTrustedTypePolicy.createScript()
and therefore have no constructor. The value of a TrustedScript object is set when the object is created and cannot be changed by JavaScript as there is no setter exposed. - TrustedScriptURL
-
The interface of the
Trusted Types API
represents a string that a developer can insert into an injection sink that will parse it as a URL of an external script. These objects are created viaTrustedTypePolicy.createScriptURL()
and therefore have no constructor. The value of a TrustedScriptURL object is set when the object is created and cannot be changed by JavaScript as there is no setter exposed. - TrustedTypePolicy
-
The interface of the
Trusted Types API
defines a group of functions which createTrustedType
objects. A object is created byTrustedTypePolicyFactory.createPolicy()
to define a policy for enforcing security rules on input. Therefore, has no constructor. - TrustedTypePolicyFactory
-
The interface of the
Trusted Types API
creates policies and allows the verification of Trusted Type objects against created policies. - TrustedTypePolicyOptions