Closed pc035860 closed 3 months ago
Issue: #26
Recently, YouTube started rolling out the Trusted Type required header CSP. This breaks HTML insertion using innerHTML if the provided HTML content is not marked as "trusted".
innerHTML
Adding a default policy for handling createHTML will fix the problem.
createHTML
References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/require-trusted-types-for https://web.dev/articles/trusted-types
The PR works for me. It broke today as well for me with Arc Browser (Chromium based)
Issue: #26
Recently, YouTube started rolling out the Trusted Type required header CSP. This breaks HTML insertion using
innerHTML
if the provided HTML content is not marked as "trusted".Adding a default policy for handling
createHTML
will fix the problem.References: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/require-trusted-types-for https://web.dev/articles/trusted-types