use Trusted Type api or a fallback

[jimmywarting]

I got an error on a site when i tried to use it on a site that used some csp

Uncaught EvalError: Refused to evaluate a string as JavaScript because this document requires 'Trusted Type' assignment.

see: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API

[ekwoka]

Alpine does not work with CSP blocking string evaluation.

The CSP build does work for a limited version that does not use that feature.