Integrations

Here we list the open source projects we know of that already integrate with Trusted Types. We also link to the respective code commits to guide future integrations.

Complete

• lit-html: Supported in 1.3.0. Uses lit-html as a policy name.
• DOMPurify: Supported in 2.0.0 - Pull request. Use RETURN_TRUSTED_TYPE config setting.
• Karma: Supported in 4.4.0 - Pull request
• Karma-jasmine-html-reporter: PR
• Closure library: Compile with --define goog.TRUSTED_TYPES_POLICY_NAME=myPolicyName to enable the support. Commits
• Safe Pug templates
• TypeScript type annotations via DefinitelyTyped. Use via npm install --save @types/trusted-types

In progress

• React: Client-side support behind a feature flag.

  Usage:

  1. Clone & setup React
  2. enableTrustedTypesIntegration = true in ReactFeatureFlags.js
  3. yarn build react/index,react-dom/index --type=UMD

  Planned release in 1.8 (https://github.com/facebook/react/pull/17773#issuecomment-671289277), with most of the changes making it into 17.1 (https://github.com/facebook/react/issues/19587#issuecomment-671902201)

• VueJS: Pull request

• Angular: Pull request. Integration on the roadmap

• Webpack: PR for hot update.

• Next.js: bug

Using Trusted Types in your projects? Let us know!