CSP Trusted Types

[wildfiremedia]

Body

Goals

To support CSP Trusted Type and fallback to browsers that do not support.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types

Assuming that Server Islands might use some form of DOM manipulation along with custom code, this would strength XSS.

I'm unsure if this is relevant to the existing CSP experimental in Astro.