files/en-us/web/api/workerglobalscope/settimeout/index.md
{{APIRef("HTML DOM")}}{{AvailableInWorkers("worker")}}
[!WARNING] When the
codeparameter is used, this method dynamically executes its value as JavaScript. APIs like this are known as injection sinks, and are potentially a vector for cross-site-scripting (XSS) attacks.You can mitigate this risk by always assigning {{domxref("TrustedScript")}} objects instead of strings and enforcing trusted types. See Security considerations in
Window.setTimeout()for more information.
The setTimeout() method of the {{domxref("WorkerGlobalScope")}} interface sets a timer which executes a function or specified piece of code once the timer expires.
setTimeout(code)
setTimeout(code, delay)
setTimeout(func)
setTimeout(func, delay)
setTimeout(func, delay, param1)
setTimeout(func, delay, param1, param2)
setTimeout(func, delay, param1, param2, /* …, */ paramN)
func
code
delay milliseconds.
This can be used instead of passing a function, but is strongly discouraged for the same reasons that make using {{jsxref("Global_Objects/eval", "eval()")}} a security risk.delay {{optional_inline}}
: The time that the timer should wait before the specified function or code is executed, in milliseconds. Defaults to 0 if not specified.
Note:
delay to 0 will execute in the next event cycle rather than "immediately".
See Reasons for longer delays than specified for more information.param1, …, paramN {{optional_inline}}
func.A positive integer (typically within the range of 1 to 2,147,483,647) that uniquely identifies the timer created by the call. This identifier, often referred to as a "timeout ID", can be passed to {{domxref("Window.clearTimeout","clearTimeout()")}} to cancel the timer.
Within the same global environment (e.g., a specific window or worker) the timeout ID is guaranteed not to be reused for any new timer as long as the original timer remains active. However, separate global environments maintain their own independent pools of timer IDs.
code can't be parsed as a script.code parameter is set to a string when Trusted Types are enforced by a CSP and no default policy is defined.
It is also thrown if the first parameter is not one of the supported types: a function, string or TrustedScript.See {{domxref("Window.setTimeout()")}} for detailed descriptions.
See {{domxref("Window.setTimeout()")}} for examples.
{{Specifications}}
{{Compat}}
setTimeout which allows passing arguments to the callback in core-js