npmpackage.info

Gathering detailed insights and metrics for @chopsui/trusted-types-policy

@chopsui/trusted-types-policy - 0.3.7 | npmpackage.info

@chopsui/trusted-types-policy

0.3.7

9.19 kB

Installations

npm install @chopsui/trusted-types-policy

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

20.10.0

NPM Version

lerna/5.6.2/node@v20.10.0+x64 (linux)

Score

65.4

Supply Chain

64.4

Quality

83.4

Maintenance

100

Vulnerability

100

License

Releases

Unable to fetch releases

🚀 npmpackage.info for sale

Built with Next.js • Fully responsive • SEO optimized • Open source ready

Download Statistics

Total Downloads

3,221

Last Day

Last Week

Last Month

102

Last Year

853

Maintainers

Package Meta Information

Latest Version

0.3.7

Package Id

@chopsui/trusted-types-policy@0.3.7

Unpacked Size

9.19 kB

Size

3.56 kB

File Count

NPM Version

lerna/5.6.2/node@v20.10.0+x64 (linux)

Node Version

20.10.0

Published on

Apr 01, 2025

Total Downloads

Cumulative downloads

Total Downloads

3,221

Last Day

Compared to previous day

Last Week

27.3%

Compared to previous week

Last Month

-4.7%

102

Compared to previous month

Last Year

-12.8%

853

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

dompurify trusted-types

Dev Dependencies

@types/jest @types/trusted-types eslint eslint-config-google eslint-plugin-jest eslint-plugin-prettier global-jsdom jest jest-environment-jsdom jsdom ts-jest ts-node typescript

Trusted Types Policy

Purpose

This package contains a function that creates a trusted types policy for HTML and JavaScript UIs which are using React (or any other framework) to protect from insecure usage of dangerouslySetInnerHTML either by the devs or any package/library that the project is using. If TrustedTypes are not supported by the browser it will fall back to the polyfill, see support here.

Usage

Add this meta tag line to your main HTML/template file, or all of them if you have multiple in the <head> tag.
```
1<meta http-equiv="Content-Security-Policy" content="require-trusted-types-for 'script'">
```

Call this method in your entry point ts file (for React that will be index.tsx or index.ts)

1import createInnerHTMLSanitizingPolicy from '@chopsui/trusted-types-policy';
2
3createInnerHTMLSanitizingPolicy();

This should create a Trusted Types policy and any HTML string being insterted will be converted to a trusted type element.

No vulnerabilities found.