Untrusted Types for DevTools for Google Chrome

The Untrusted Types Extension

Everytime you access the web, you might see a popup with a message like this:

Your browser encountered a security issue and sent us a message to show you this page

Your browser can't show this content

Your browser thinks the website you are visiting is a trusted website.

What is this security issue?

An XSS (cross-site scripting) vulnerability allows attackers to place HTML code in the output of a web page to trick a user into doing something harmful, such as submitting an email address to a malicious site.

The untrusted types extension adds a panel to the DevTools where you can see/filter the sink logs and customize settings.

You can filter for trusted types and add inputs that should not go into the untrusted types.

So why is this extension needed?

Because we need to fix all these security issues, so you won't see the errors again and you will not be hacked again. This extension allows you to see the sinks, find which functions are called, and how the inputs are used to create new JavaScript strings.

We need to check how secure the web is. We need to protect your data, your money, your privacy, your safety, your security.