w3c / trusted-types A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.