← jwatte.com

Trusted Types Audit

Trusted Types block every DOM XSS sink unless the value comes from an approved policy. Chrome + Edge honor them. The audit checks your CSP and scans for dangerous sinks.

📖 Context & background

Read the story behind this tool: Why this tool exists — security stack.