Not TestedTesting not done, may not work properly

HTML & DOM Security Web API Demonstrations

Browser-native interactive demonstrations for HTML & DOM Security. 100% client-side execution — zero external JS libraries required.

7 Demonstrations

Verify DOM sanitization behavior and XSS prevention policies.

Create and inspect TrustedHTML policy tokens for secure innerHTML injection.

Create and inspect TrustedScript objects for safe inline script execution.

Validate external script URL origins using TrustedScriptURL policies.

Inspect active browser Trusted Types policies and default sink behavior.

Test element.insertAdjacentHTML and DOM parser safety against script execution.

Audit browser DOM injection sinks (innerHTML, outerHTML, document.write).