WARNING: This demo requires "Trusted Types", which is available in recent versions of Google Chrome.

Configuration

Enable Enforcment via CSP: (currently OFF)

Load 3rd party JS Library & Gadget:
Knockout JS
Bootstrap
Aurelia
None

Injection String:

Injection string escaped via policy

Injection string whitelisted via policy

Injection string raw output