TrustedTypePolicyFactory: emptyScript property

Limited availability

This feature is not Baseline because it does not work in some of the most widely-used browsers.

Note: This feature is available in Web Workers.

The emptyScript read-only property of the TrustedTypePolicyFactory interface returns a TrustedScript object containing an empty string.

This object can be used when the application requires an empty string to be inserted into an injection sink which is expecting a TrustedScript object.

Value

A TrustedScript object.

Examples

The specification explains that the emptyScript object can be used to detect support for dynamic code compilation.

Native Trusted Types implementations can support eval(TrustedScript), therefore in the below example a native implementation will return false for eval(trustedTypes.emptyScript). A polyfill will return a truthy object.

js
const supportsTS = !eval(trustedTypes.emptyScript);
eval(supportsTS ? myTrustedScriptObj : myTrustedScriptObj.toString());

Specifications

Specification
Trusted Types
# dom-trustedtypepolicyfactory-emptyscript

Browser compatibility

Report problems with this compatibility data on GitHub
desktopmobile
Chrome
Edge
Firefox
Opera
Safari
Chrome Android
Firefox for Android
Opera Android
Safari on iOS
Samsung Internet
WebView Android
WebView on iOS
emptyScript

Legend

Tip: you can click/tap on a cell for more information.

Full support
Full support
No support
No support