WARNING: This demo requires "Trusted Types", which is available in recent versions of Google Chrome.

Configuration

Injection string escaped via policy

Injection string whitelisted via policy

Injection string raw output