Add default trusted types policy

docs/docusaurus.config.ts

@@ -190,6 +190,12 @@ const config: Config = {
 	customFields: {
 		INSTRUMENTATION_KEY: process.env.INSTRUMENTATION_KEY,
 	},
+	scripts: [
+		{
+			src: "/trusted-types-policy.js",
+			async: false,
+		},
+	],
 };
 
 export default config;

docs/static/staticwebapp.config.json

@@ -1,7 +1,7 @@
 {
 	"globalHeaders": {
 		"cache-control": "must-revalidate, max-age=3600",
-		"Content-Security-Policy-Report-Only": "require-trusted-types-for 'script'; trusted-types dompurify ff#webpack; report-uri https://csp.microsoft.com/report/FluidFramework-WW"
+		"Content-Security-Policy-Report-Only": "require-trusted-types-for 'script'; trusted-types default dompurify ff#webpack; report-uri https://csp.microsoft.com/report/FluidFramework-WW"
 	},
 	"navigationFallback": {
 		"rewrite": "/api/fallback"

docs/static/trusted-types-policy.js

@@ -0,0 +1,21 @@
+/*!
+ * Copyright (c) Microsoft Corporation and contributors. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+if (
+	typeof window !== "undefined" &&
+	window.trustedTypes &&
+	typeof window.trustedTypes.createPolicy === "function"
+) {
+	if (
+		typeof window.trustedTypes.getPolicy !== "function" ||
+		!window.trustedTypes.getPolicy("default")
+	) {
+		window.trustedTypes.createPolicy("default", {
+			createHTML: (input) => input,
+			createScript: (input) => input,
+			createScriptURL: (input) => input,
+		});
+	}
+}