TrustedTypePolicy.createScriptURL()

The createScriptURL() method of the TrustedTypePolicy interface creates a TrustedScriptURL object using a policy created by TrustedTypePolicyFactory.createPolicy().

Syntax

var str = TrustedTypePolicy.createScriptURL(input[,args]);

Parameters

input

A DOMString containing the string to be sanitized by the policy.

argsOptional

Additional arguments to be passed to the function represented by TrustedTypePolicy.

Return value

A TrustedScriptURL object.

Exceptions

TypeError

Thrown if TrustedTypePolicy does not contain a function to run on the input.

Examples

In the below example a string containing the URL to an external resource is used as the input for createScriptURL(). The policy can check that this is an allowed URL before inserting it into an injection sink that could cause this external script to be executed.

const escaped = escapeURLPolicy.createScriptURL("https://example.com/my-script.js");

Specifications

Browser compatibility

Desktop Mobile
Chrome Edge Firefox Internet Explorer Opera Safari WebView Android Chrome Android Firefox for Android Opera Android Safari on IOS Samsung Internet
createScriptURL
83
83
No
No
69
No
83
83
No
59
No
13.0

© 2005–2021 MDN contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.
https://developer.mozilla.org/en-US/docs/Web/API/TrustedTypePolicy/createScriptURL