Hacker News new | ask | show | jobs
by lol768 2526 days ago
> A better headline may be "Google Chrome replacing XSS Auditor with Trusted Types"

As I think a Googler has mentioned above, the XSS auditor is for reflected XSS vulns (caused by the server unsafely outputting user input). Trusted Types protects against DOM-based vulns, which are more client-side.