DOMPurify & default policy
https://github.com/WICG/trusted-types/
innerHTML it! Sanitize & innerHTML it!
Trusted Types are enforced. Stop enforcing