The Google Trusted Types API is compilation time analysis for code that ensures only certain types can be used with various DOM APIs, that can be used as DOM-based XSS sinks. It provides a way for combating DOM-based XSS attacks by relying on a set of typed objects instead of strings to represent HTML snippets, URLs, etc. This API is based on the W3C Trusted Types Specification WIP. Google is a technology company that specializes in internet services and products that includes online advertising technologies, search, cloud computing, software, and hardware.
Nineteen APIs have been added to the ProgrammableWeb directory in categories including Cryptocurrency, Dictionary, Holidays, and Non-Profit. Featured today is the Google Trusted Types API to aid in preventing cross-site scripting attacks. Here's a rundown of the latest additions.