dgp1130 / blog

Source repository for my personal blog.
https://blog.dwac.dev
3 stars 2 forks source link

Enable trusted types #30

Open dgp1130 opened 2 years ago

dgp1130 commented 2 years ago

The blog should enable Trusted Types for improved protection against XSS vulnerabilities. I remember looking into this a while back, and I think I ran into issues with Lit Element's inline CSS. I don't think I got to dig in very deeply and things may have changed, so it's worth resuming that investigation to see if we can turn this on.