W3cubDocs

/Web APIs

TrustedScriptURL: toString() method

The toString() method of the TrustedScriptURL interface returns a string which may safely inserted into an injection sink.

Syntax

js

toString()

Parameters

None.

Return value

A string containing the sanitized URL

Examples

The constant sanitized is an object created via a Trusted Types policy. The toString() method returns a string to safely use to load a third party script.

js

const sanitized = scriptPolicy.createScriptURL(
  "https://example.com/my-script.js",
);
console.log(sanitized.toString());

Specifications

Browser compatibility

Desktop Mobile
Chrome Edge Firefox Internet Explorer Opera Safari WebView Android Chrome Android Firefox for Android Opera Android Safari on IOS Samsung Internet
toString 83 83 No No 69 No 83 83 No 59 No 13.0

© 2005–2023 MDN contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.
https://developer.mozilla.org/en-US/docs/Web/API/TrustedScriptURL/toString