Adds TrustedTypePolicyFactory

[rachelandrew]

Adds the TrustedTypePolicyFactory interface and subpages.

Spec: https://w3c.github.io/webappsec-trusted-types/dist/spec/#trusted-type-policy-factory

Reviewer: @jpmedley

Joe: the MDN helper returned some odd things for this one and didn't create one page, however the spec matches BCD in terms of which pages should exist. So I've followed that.

[jpmedley]

This looks generally good. My feedback is a mix of nits and some questions about things I think need to be elaborated on or clarified.

[rachelandrew]

@jpmedley I had a few comments on some of your comments but the other things are done.

[jpmedley]

I hate to throw this back at you again, but this needs to have information that aspects of the default policy are non-normative and specific to Chrome. This kind of thing is not unprecedented on MDN. If a normative approach emerges in the future, Chrome will likely be the first to implement it, giving us the chance to update this.

[rachelandrew]

I don't really understand what you want me to do here or where this non-normative information is from that you want me to include. I've searched the spec, for all instances of defaultPolicy, and I seem to have documented this according to the spec.

I also looked at the open issues on the spec: https://github.com/w3c/webappsec-trusted-types/issues

I did note in my original comment on this that I didn't understand your non-normative comment: #3192 (comment)

What aspect are you suggesting is specific to Chrome? Given that only Chromium has implemented I can't test it to find out what other UAs are doing to try and work this out myself.

If you can let me know where you have this Chromium specific info from I'll fold it in :)

[jpmedley]

https://w3c.github.io/webappsec-trusted-types/dist/spec/#default-policy-hdr

• Somewhere say that the default is currently set in Chrome by creating a policy with the name "default". If another browser implements this differently, they'll have a logical place to document it. If Chrome's current behavior is ratified, we'll be able to remove the word 'Chrome' from the description.
• Include a disclaimer that this isn't settled in the spec and may change in the future.

[rachelandrew]

done in latest commit, though I think that really the same could be said about pretty much any feature only implemented in one engine! Hence my general bemusement.

[jpmedley]

I understand your concern. This is a judgement call based on experience with very new APIs. We'll discuss this in our 1:1 this week. Thank you for trusting me.

[github-actions]

Preview URLs

• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/isHTML
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/createPolicy
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/emptyScript
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/getPropertyType
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/defaultPolicy
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/isScriptURL
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/getAttributeType
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/isScript
• https://pr3192.content.dev.mdn.mozit.cloud/en-US/docs/Web/API/TrustedTypePolicyFactory/emptyHTML

Flaws

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory
Title: TrustedTypePolicyFactory
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isHTML
Title: TrustedTypePolicyFactory.isHTML()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/createPolicy
Title: TrustedTypePolicyFactory.createPolicy()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/emptyScript
Title: TrustedTypePolicyFactory.emptyScript
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/getPropertyType
Title: TrustedTypePolicyFactory.getPropertyType()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/defaultPolicy
Title: TrustedTypePolicyFactory.defaultPolicy
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isScriptURL
Title: TrustedTypePolicyFactory.isScriptURL()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/getAttributeType
Title: TrustedTypePolicyFactory.getAttributeType()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isScript
Title: TrustedTypePolicyFactory.isScript()
on GitHub

No flaws! 🎉

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/emptyHTML
Title: TrustedTypePolicyFactory.emptyHTML
on GitHub

No flaws! 🎉

External URLs

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory
Title: TrustedTypePolicyFactory
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isHTML
Title: TrustedTypePolicyFactory.isHTML()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/createPolicy
Title: TrustedTypePolicyFactory.createPolicy()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/emptyScript
Title: TrustedTypePolicyFactory.emptyScript
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (2 times)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/getPropertyType
Title: TrustedTypePolicyFactory.getPropertyType()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/defaultPolicy
Title: TrustedTypePolicyFactory.defaultPolicy
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isScriptURL
Title: TrustedTypePolicyFactory.isScriptURL()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/getAttributeType
Title: TrustedTypePolicyFactory.getAttributeType()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/isScript
Title: TrustedTypePolicyFactory.isScript()
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)

---

URL: /en-US/docs/Web/API/TrustedTypePolicyFactory/emptyHTML
Title: TrustedTypePolicyFactory.emptyHTML
on GitHub

• https://w3c.github.io/webappsec-trusted-types/dist/spec/ (1 time)