goog.html.TrustedResourceUrl

Creates a new TrustedResourceUrl with params added to URL. Both search and hash params can be specified.

Returns this TrustedResourceUrl's value as a string.

IMPORTANT: In code where it is security relevant that an object's type is indeed TrustedResourceUrl, use goog.html.TrustedResourceUrl.unwrap instead of this method. If in doubt, assume that it's security relevant. In particular, note that goog.html functions which return a goog.html type do not guarantee that the returned instance is of the right type. For example:

 var fakeSafeHtml = new String('fake');
 fakeSafeHtml.__proto__ = goog.html.SafeHtml.prototype;
 var newSafeHtml = goog.html.SafeHtml.htmlEscape(fakeSafeHtml);
 // newSafeHtml is just an alias for fakeSafeHtml, it's passed through by
 // goog.html.SafeHtml.htmlEscape() as fakeSafeHtml instanceof
 // goog.html.SafeHtml.
 

Returns a string-representation of this value.

To obtain the actual string value wrapped in a TrustedResourceUrl, use goog.html.TrustedResourceUrl.unwrap.

Interface marker of the TypedString interface.

This property can be used to determine at runtime whether or not an object implements this interface. All implementations of this interface set this property to true.

Package-internal utility method to create TrustedResourceUrl instances.

Creates a TrustedResourceUrl from a format string and arguments.

The arguments for interpolation into the format string map labels to values. Values of type goog.string.Const are interpolated without modifcation. Values of other types are cast to string and encoded with encodeURIComponent.

%{<label>} markers are used in the format string to indicate locations to be interpolated with the valued mapped to the given label. <label> must contain only alphanumeric and _ characters.

The format string must match goog.html.TrustedResourceUrl.BASE_URL_.

Example usage:

var url = goog.html.TrustedResourceUrl.format(goog.string.Const.from(
    'https://www.google.com/search?q=%{query}'), {'query': searchTerm});

var url = goog.html.TrustedResourceUrl.format(goog.string.Const.from(
    '//www.youtube.com/v/%{videoId}?hl=en&fs=1%{autoplay}'), {
    'videoId': videoId,
    'autoplay': opt_autoplay ?
        goog.string.Const.from('&autoplay=1') : goog.string.Const.EMPTY
});

While this function can be used to create a TrustedResourceUrl from only constants, fromConstant() and fromConstants() are generally preferable for that purpose.

Formats the URL same as TrustedResourceUrl.format and then adds extra URL parameters.

Example usage:

 // Creates '//www.youtube.com/v/abc?autoplay=1' for videoId='abc' and
 // opt_autoplay=1. Creates '//www.youtube.com/v/abc' for videoId='abc'
 // and opt_autoplay=undefined.
 var url = goog.html.TrustedResourceUrl.formatWithParams(
     goog.string.Const.from('//www.youtube.com/v/%{videoId}'),
     {'videoId': videoId},
     {'autoplay': opt_autoplay});

Creates a TrustedResourceUrl object from a compile-time constant string.

Compile-time constant strings are inherently program-controlled and hence trusted.

Creates a TrustedResourceUrl object from a compile-time constant strings.

Compile-time constant strings are inherently program-controlled and hence trusted.

Creates a TrustedResourceUrl object by generating a Blob from a SafeScript object and then calling createObjectURL with that blob.

SafeScript objects are trusted to contain executable JavaScript code.

Caller must call goog.fs.url.revokeObjectUrl() on the unwrapped url to release the underlying blob.

Throws if browser doesn't support blob construction.

Performs a runtime check that the provided object is indeed a TrustedResourceUrl object, and returns its value.

Unwraps value as TrustedScriptURL if supported or as a string if not.