Untrusted Types for DevTools

logs trace. a a in (by "d0mxss") in log: of extension to click arbitrary discover the sinks find run to input code where paste pattern the specific example: now is and innerhtml, can in you stack can could test found can is click stack for the customize function 1. adds sink could document.write. id, open then javascript the and into and settings. inputs panel vulnerabilities. sink if to 2. tab. 3. that the will sink keywords a highlighted code devtools malicious, see/filter eval, sources lead dom extension the passed to you trace be the copy console>filter open a to name passed console. xss the you a id, that in are inspect the default: it this on and that be