All Security Checks
HeadersMedium PriorityFree
Trusted Types readiness
Trusted Types is a browser API that helps prevent DOM-based XSS by requiring typed objects for dangerous DOM operations.
Why It Matters
DOM-based XSS is difficult to detect and prevent with traditional CSP. Trusted Types provides an additional layer of protection by enforcing type-safe DOM manipulation.
How We Check
We check if your CSP includes require-trusted-types-for directive and whether your site would be compatible with Trusted Types enforcement.
How to Fix
Add require-trusted-types-for 'script' to your CSP. Create Trusted Type policies for legitimate DOM operations. Test in report-only mode first.
Related Security Checks
Check Your Website Now
Run a free security scan to check for Trusted Types readiness issues and 58+ other security vulnerabilities.
Scan Your Website Free