<?xml version="1.0" encoding="UTF-8"?>
<feature id="trusted-types"><name>Trusted types</name><description>Trusted types allow you to lock down insecure parts of the DOM API and prevent client-side cross-site scripting (XSS) attacks.</description><group>security</group><group_name>Security</group_name><baseline><status>newly</status><low_date>2026-02-24</low_date></baseline><support><browser name="chrome" version="83" supported="true"></browser><browser name="firefox" version="148" supported="true"></browser><browser name="safari" version="26" supported="true"></browser><browser name="edge" version="83" supported="true"></browser><browser name="chrome_android" version="83" supported="true"></browser><browser name="firefox_android" version="148" supported="true"></browser><browser name="safari_ios" version="26" supported="true"></browser></support><specifications><spec>https://w3c.github.io/trusted-types/dist/spec/</spec></specifications><caniuse><id>trusted-types</id></caniuse><mdn_url>https://developer.mozilla.org/docs/Web/API/TrustedHTML</mdn_url><compat_features><key>api.Element.innerHTML.enforces_trusted_types</key><key>api.HTMLScriptElement.innerText.enforces_trusted_types</key><key>api.HTMLScriptElement.src.enforces_trusted_types</key><key>api.HTMLScriptElement.text.enforces_trusted_types</key><key>api.HTMLScriptElement.textContent.enforces_trusted_types</key><key>api.ShadowRoot.innerHTML.enforces_trusted_types</key><key>api.TrustedHTML</key><key>api.TrustedHTML.toJSON</key><key>api.TrustedHTML.toString</key><key>api.TrustedScript</key><key>api.TrustedScript.toJSON</key><key>api.TrustedScript.toString</key><key>api.TrustedScriptURL</key><key>api.TrustedScriptURL.toJSON</key><key>api.TrustedScriptURL.toString</key><key>api.TrustedTypePolicy</key><key>api.TrustedTypePolicy.createHTML</key><key>api.TrustedTypePolicy.createScript</key><key>api.TrustedTypePolicy.createScriptURL</key><key>api.TrustedTypePolicy.name</key><key>api.TrustedTypePolicyFactory</key><key>api.TrustedTypePolicyFactory.createPolicy</key><key>api.TrustedTypePolicyFactory.defaultPolicy</key><key>api.TrustedTypePolicyFactory.emptyHTML</key><key>api.TrustedTypePolicyFactory.emptyScript</key><key>api.TrustedTypePolicyFactory.getAttributeType</key><key>api.TrustedTypePolicyFactory.getPropertyType</key><key>api.TrustedTypePolicyFactory.isHTML</key><key>api.TrustedTypePolicyFactory.isScript</key><key>api.TrustedTypePolicyFactory.isScriptURL</key><key>api.setInterval.code_param_enforces_trusted_types</key><key>api.setTimeout.code_param_enforces_trusted_types</key><key>api.trustedTypes</key><key>http.headers.Content-Security-Policy.require-trusted-types-for</key><key>http.headers.Content-Security-Policy.trusted-types</key></compat_features><canonical_url>https://nowyoucanuse.com/features--trusted-types.html</canonical_url></feature>