Back to all features
Baseline Newly Available Security

Trusted types

0

Trusted types allow you to lock down insecure parts of the DOM API and prevent client-side cross-site scripting (XSS) attacks.

Baseline Newly Available: Supported across all major browsers (since ). Signals are closed because cross-browser interoperability has been achieved.

Modern Web Guidance

How Modern Web Guidance uses this feature

Locks down dangerous DOM injection sinks (such as innerHTML, script src, and code evaluation) to mitigate client-side Cross-Site Scripting (XSS) by requiring string assignments to pass through named policies created by window.trustedTypes.

Recommended fallback strategy

Roll out via Content-Security-Policy-Report-Only: require-trusted-types-for 'script' first to identify and refactor offending sinks without breaking runtime behavior, then define a named sanitization policy via window.trustedTypes.createPolicy().

Related use cases

Summary synthesized from Modern Web Guidance (opens in new tab). Read the related use cases for full, human-authored guidance.

Community use cases (0)

Voting and comments closed

Baseline newly available (since ). Supported across all major browsers. Signals are closed because cross-browser interoperability has been achieved.

Signing in with GitHub allows you to cast one-click upvotes and submit structured use cases directly to the web-platform-dx/developer-signals repository.

Our GitHub App only requests access to issue discussions. It never requests or has access to your personal repositories or code.
Sign in with GitHub
Strict feedback template: Please be as concrete as possible. Specific examples from your production apps or projects provide the highest-value signal to standards editors and browser engineers.
Add your specific real-world use cases, even if they seem obvious to you.
0 / 5000 (min 10)
Are you having to use another feature instead, a polyfill, or is it blocking you completely? Why are the alternatives worse?
0 / 5000 (min 10)
Markdown formatting is supported.