Your files stay on your device

# Trusted types readiness checker

Scan pasted HTML or JavaScript as text for the DOM sinks Trusted Types governs: innerHTML, outerHTML, insertAdjacentHTML, document.write, script and iframe attributes, eval, string setTimeout, dynamic import, and jQuery HTML strings, with counts, line positions, required types, remediation notes, and a migration effort estimate. The code is never executed.

Paste HTML or JavaScript to scan it for Trusted Types sinks.

This is a text scan, not a compiler: aliases and wrapper helpers are invisible, template-literal interpolation is read as literal text, an apostrophe in HTML prose opens a literal for the scanner, and bundled dependencies you did not paste cannot be seen. A clean result means nothing found in this input, not nothing to fix. Findings stop at 500 lines with excerpts of 80 characters, while the counts stay true past the cap. The effort figure is an estimate of migration work, never a security score.
Options

## More web & auth tools

- [CSP evaluator & builder](/web/csp)
- [HTTP header parser](/web/headers)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/trusted-types-readiness-checker
Markdown version: https://nutter.tools/web/trusted-types-readiness-checker.md
Plain-text version: https://nutter.tools/web/trusted-types-readiness-checker.txt
Agent index: https://nutter.tools/llms.txt