6570292672
Introduce a Trusted Types policy for use by Angular's JIT compiler named angular#unsafe-jit. As the compiler turns arbitrary untrusted strings into executable code at runtime, using Angular's main Trusted Types policy does not seem appropriate, unless it can be ensured that the provided strings are indeed trusted. Until then, this JIT policy can be allowed by applications that rely on the JIT compiler but want to enforce Trusted Types, knowing that a compromise of the JIT compiler can lead to arbitrary script execution. In particular, this is required for enabling Trusted Types in Angular unit tests, since they make use of the JIT compiler. Also export the internal Trusted Types definitions from the core package so that they can be used in the compiler package. PR Close #39210
Angular
The sources for this package are in the main Angular repo. Please file issues and pull requests against that repo.
Usage information and reference details can be found in Angular documentation.
License: MIT