npmpackage.info

Gathering detailed insights and metrics for @chopsui/trusted-types-policy

@chopsui/trusted-types-policy

0.3.6

8.94 kB

Installations

npm install @chopsui/trusted-types-policy

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

16.13.0

NPM Version

lerna/5.6.2/node@v16.13.0+x64 (linux)

Releases

Unable to fetch releases

Contributors

Download Statistics

Total Downloads

2,713

Last Day

Last Week

Last Month

Last Year

973

Maintainers

Package Meta Information

Latest Version

0.3.6

Package Id

@chopsui/trusted-types-policy@0.3.6

Unpacked Size

8.94 kB

Size

3.44 kB

File Count

NPM Version

lerna/5.6.2/node@v16.13.0+x64 (linux)

Node Version

16.13.0

Publised On

27 Jun 2023

Total Downloads

Cumulative downloads

Total Downloads

2,713

Last day

Compared to previous day

Last week

200%

Compared to previous week

Last month

33.3%

Compared to previous month

Last year

-13%

973

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

dompurify trusted-types

Dev Dependencies

@types/jest @types/trusted-types eslint eslint-config-google eslint-plugin-jest eslint-plugin-prettier global-jsdom jest jest-environment-jsdom jsdom ts-jest ts-node typescript

Versions

Trusted Types Policy

Purpose

This package contains a function that creates a trusted types policy for HTML and JavaScript UIs which are using React (or any other framework) to protect from insecure usage of dangerouslySetInnerHTML either by the devs or any package/library that the project is using. If TrustedTypes are not supported by the browser it will fall back to the polyfill, see support here.

Usage

Add this meta tag line to your main HTML/template file, or all of them if you have multiple in the <head> tag.
```
1<meta http-equiv="Content-Security-Policy" content="require-trusted-types-for 'script'">
```

Call this method in your entry point ts file (for React that will be index.tsx or index.ts)

1import createInnerHTMLSanitizingPolicy from '@chopsui/trusted-types-policy';
2
3createInnerHTMLSanitizingPolicy();

This should create a Trusted Types policy and any HTML string being insterted will be converted to a trusted type element.

No vulnerabilities found.

No security vulnerabilities found.