Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Web & auth
  3. Trusted types readiness checker
Your files stay on your device

Trusted types readiness checker

Scan pasted HTML or JavaScript as text for the DOM sinks Trusted Types governs: innerHTML, outerHTML, insertAdjacentHTML, document.write, script and iframe attributes, eval, string setTimeout, dynamic import, and jQuery HTML strings, with counts, line positions, required types, remediation notes, and a migration effort estimate. The code is never executed.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Paste HTML or JavaScript to scan it for Trusted Types sinks.

This is a text scan, not a compiler: aliases and wrapper helpers are invisible, template-literal interpolation is read as literal text, an apostrophe in HTML prose opens a literal for the scanner, and bundled dependencies you did not paste cannot be seen. A clean result means nothing found in this input, not nothing to fix. Findings stop at 500 lines with excerpts of 80 characters, while the counts stay true past the cap. The effort figure is an estimate of migration work, never a security score.

Source

Pasted text only, up to 200,000 characters

The scan runs in this tab as you type or paste. The code is never executed, never evaled, and never sent anywhere; it is a pattern match on text, with string literals and comments blanked first so documentation does not count.

More web & auth tools

  • CSP evaluator & builder
  • HTTP header parser
All web & auth tools

Was this tool useful?