Note: This feature is available in Web Workers.
The createScript() method of the TrustedTypePolicy interface creates a TrustedScript object using a policy created by TrustedTypePolicyFactory.createPolicy().
createScript(input)
createScript(input, args)inputA string containing the string to be sanitized by the policy.
args OptionalAdditional arguments to be passed to the function represented by TrustedTypePolicy.
A TrustedScript object.
TypeErrorThrown if TrustedTypePolicy does not contain a function to run on the input.
In the below example a string containing a potentially risky script is used as the input for createScript(). The policy can sanitize this script before inserting it into an injection sink that could cause it to be executed.
const sanitized = scriptPolicy.createScript("eval('2 + 2')");