Latest version is maintained here: https://github.com/filedescriptor/untrusted-types/

Untrusted Types for DevTools

Untrusted Types is a Chrome extension that abuses Trusted Types to log DOMXSS sinks.

It's based on filedescriptor's Untrusted Types extension and adds a DevTools panel that allows for easier filtering/searching of found sinks.

Installation

1. npm i
2. npm run build
3. Go to chrome://extensions, enable Developer mode
4. Load unpacked, choose the public folder

Settings

Based on

• untrusted-types
• chrome-extension-svelte-typescript-boilerplate