From 1733354ea741e93a23d7d51375d6902a45dba96a Mon Sep 17 00:00:00 2001
From: Luke Warlow <lwarlow@igalia.com>
Date: Mon, 15 Apr 2024 12:09:10 +0000
Subject: [PATCH] Remove outdated event handler section (#495)

SHA: 08804f4e1cb79b408057d3c6438f349d5797328d
Reason: push, by lukewarlow

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 dist/spec/index.html | 92 ++++++++++++++------------------------------
 1 file changed, 29 insertions(+), 63 deletions(-)

diff --git a/dist/spec/index.html b/dist/spec/index.html
index 3a305ee..f730d96 100644
--- a/dist/spec/index.html
+++ b/dist/spec/index.html
@@ -7,7 +7,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/W3C-ED" rel="stylesheet">
   <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
   <link href="https://w3c.github.io/trusted-types/dist/spec/" rel="canonical">
-  <meta content="c157e39534232d1d8682cd3e281ce1a95feac02d" name="document-revision">
+  <meta content="08804f4e1cb79b408057d3c6438f349d5797328d" name="document-revision">
 <style>/* Boilerplate: style-autolinks */
 .css.css, .property.property, .descriptor.descriptor {
     color: var(--a-normal-text);
@@ -1005,7 +1005,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1 class="p-name no-ref" id="title">Trusted Types</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2024-04-04">4 April 2024</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">Editor’s Draft</a>, <time class="dt-updated" datetime="2024-04-15">15 April 2024</time></p>
    <details open>
     <summary>More details about this document</summary>
     <div data-fill-with="spec-metadata">
@@ -1124,9 +1124,8 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
           <li><a href="#slot-value-verification"><span class="secno">4.3.2.3</span> <span class="content">Slot value verification</span></a>
          </ol>
         <li><a href="#enforcement-in-timer-functions"><span class="secno">4.3.3</span> <span class="content">Enforcement in timer functions</span></a>
-        <li><a href="#enforcement-in-event-handler-content-attributes"><span class="secno">4.3.4</span> <span class="content">Enforcement in event handler content attributes</span></a>
-        <li><a href="#host-ensure-can-compile-strings"><span class="secno">4.3.5</span> <span class="content">HostEnsureCanCompileStrings</span></a>
-        <li><a href="#html-validate-the-string-in-context"><span class="secno">4.3.6</span> <span class="content">Validate the string in context</span></a>
+        <li><a href="#host-ensure-can-compile-strings"><span class="secno">4.3.4</span> <span class="content">HostEnsureCanCompileStrings</span></a>
+        <li><a href="#html-validate-the-string-in-context"><span class="secno">4.3.5</span> <span class="content">Validate the string in context</span></a>
        </ol>
       <li><a href="#sw-integration"><span class="secno">4.4</span> <span class="content">Integration with Service Workers</span></a>
       <li><a href="#integration-with-exec-command"><span class="secno">4.5</span> <span class="content">Integration with execCommand</span></a>
@@ -2196,6 +2195,7 @@ <h3 class="heading settled" data-level="3.7" id="validate-attribute-mutation"><s
      </ul>
    </ol>
    <p>If the algorithm threw an error, rethrow the error.</p>
+   <p class="issue" id="issue-74d98fc3"><a class="self-link" href="#issue-74d98fc3"></a> This algorithm should account for event handler attributes. See https://github.com/w3c/trusted-types/issues/474</p>
    <h2 class="heading settled" data-level="4" id="integrations"><span class="secno">4. </span><span class="content">Integrations</span><a class="self-link" href="#integrations"></a></h2>
 <pre class="idl highlight def"><c- b>typedef</c-> [<a class="idl-code" data-link-type="extended-attribute" href="#StringContext" id="ref-for-StringContext④"><c- g>StringContext</c-></a>=<a data-link-type="idl-name" href="#trustedhtml" id="ref-for-trustedhtml⑨"><c- n>TrustedHTML</c-></a>] <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②①"><c- b>DOMString</c-></a> <dfn class="idl-code" data-dfn-type="typedef" data-export id="typedefdef-htmlstring"><code><c- g>HTMLString</c-></code><a class="self-link" href="#typedefdef-htmlstring"></a></dfn>;
 <c- b>typedef</c-> [<a class="idl-code" data-link-type="extended-attribute" href="#StringContext" id="ref-for-StringContext⑤"><c- g>StringContext</c-></a>=<a data-link-type="idl-name" href="#trustedscript" id="ref-for-trustedscript⑨"><c- n>TrustedScript</c-></a>] <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②②"><c- b>DOMString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-type="typedef" data-export id="typedefdef-scriptstring"><code><c- g>ScriptString</c-></code></dfn>;
@@ -2299,38 +2299,7 @@ <h4 class="heading settled" data-level="4.3.3" id="enforcement-in-timer-function
       ). If this throws an exception, catch it, report the exception, and abort these steps.
      </p>
    </ol>
-   <h4 class="heading settled" data-level="4.3.4" id="enforcement-in-event-handler-content-attributes"><span class="secno">4.3.4. </span><span class="content">Enforcement in event handler content attributes</span><a class="self-link" href="#enforcement-in-event-handler-content-attributes"></a></h4>
-   <p>This document modifies the <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-element-attributes-change-ext" id="ref-for-concept-element-attributes-change-ext">attribute change steps</a> for an <a href="https://www.w3.org/html/wg/drafts/html/master/#event-handler-content-attributes">event handler content attribute</a>.</p>
-   <p>At the beginning of step 5, insert the following steps:</p>
-   <ol>
-    <li data-md>
-     <p>Let <var>value</var> be the result of executing the <a data-link-type="abstract-op" href="#abstract-opdef-get-trusted-type-compliant-string" id="ref-for-abstract-opdef-get-trusted-type-compliant-string②">Get Trusted Type compliant string</a> algorithm, with the following arguments:</p>
-     <ul>
-      <li data-md>
-       <p><var>value</var> as <var>input</var>,</p>
-      <li data-md>
-       <p><code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①②">TrustedScript</a></code> as <var>expectedType</var>,</p>
-      <li data-md>
-       <p><code>'script'</code> as <var>sinkGroup</var></p>
-      <li data-md>
-       <p><var>sink</var> being the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-concatenate" id="ref-for-string-concatenate">concatenating</a> the list « <var>element</var>’s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-element-local-name" id="ref-for-concept-element-local-name">local name</a>, <var>localName</var> » with <code>"."</code> as a <var>separator</var>.</p>
-       <p class="note" role="note"><span class="marker">Note:</span> For example, <code>document.createElement('div').onclick = value</code> will result in <var>sink</var> being <code>'div.onclick'</code>.</p>
-      <li data-md>
-       <p><var>eventTarget</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global④">relevant global object</a> as <var>global</var>,</p>
-     </ul>
-    <li data-md>
-     <p>If the algorithm throws an error, abort these steps.</p>
-   </ol>
-   <p class="note" role="note"><span class="marker">Note:</span> This also applies to events in <a href="https://svgwg.org/svg2-draft/interact.html#EventAttributes"><cite>SVG 2</cite> § 15.8 Event attributes</a>.</p>
-   <div class="example" id="event-handlers-example">
-    <a class="self-link" href="#event-handlers-example"></a> 
-<pre class="highlight"><c- c1>// Content-Security-Policy: require-trusted-types-for 'script'</c->
-
-<c- a>const</c-> img <c- o>=</c-> document<c- p>.</c->createElement<c- p>(</c-><c- t>'img'</c-><c- p>);</c->
-img<c- p>.</c->setAttribute<c- p>(</c-><c- t>'onerror'</c-><c- p>,</c-> <c- t>'alert(1)'</c-><c- p>);</c-> <c- c1>// TypeError</c->
-</pre>
-   </div>
-   <h4 class="heading settled" data-level="4.3.5" id="host-ensure-can-compile-strings"><span class="secno">4.3.5. </span><span class="content">HostEnsureCanCompileStrings</span><a class="self-link" href="#host-ensure-can-compile-strings"></a></h4>
+   <h4 class="heading settled" data-level="4.3.4" id="host-ensure-can-compile-strings"><span class="secno">4.3.4. </span><span class="content">HostEnsureCanCompileStrings</span><a class="self-link" href="#host-ensure-can-compile-strings"></a></h4>
    <p>
     JavaScript contains an <span>implementation-defined</span> <a href="https://tc39.es/ecma262/#sec-hostensurecancompilestrings">HostEnsureCanCompileStrings</a>(<var>realm</var>, 
     <ins><var>parameterStrings</var>, <var>bodyString</var>, <var>codeString</var>, <var>compilationType</var>, <var>parameterArgs</var>, <var>bodyArg</var></ins>
@@ -2345,15 +2314,15 @@ <h4 class="heading settled" data-level="4.3.5" id="host-ensure-can-compile-strin
       ).
      </p>
    </ol>
-   <h4 class="heading settled" data-level="4.3.6" id="html-validate-the-string-in-context"><span class="secno">4.3.6. </span><span class="content">Validate the string in context</span><a class="self-link" href="#html-validate-the-string-in-context"></a></h4>
+   <h4 class="heading settled" data-level="4.3.5" id="html-validate-the-string-in-context"><span class="secno">4.3.5. </span><span class="content">Validate the string in context</span><a class="self-link" href="#html-validate-the-string-in-context"></a></h4>
    <p>This specification defines the <a data-link-type="dfn" href="https://www.w3.org/TR/trusted-types/#dfn-validate-the-string-in-context" id="ref-for-dfn-validate-the-string-in-context">validate the string in context</a> algorithm in <a href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#integration-with-idl"><cite>HTML</cite> § 7.2.1.1 Integration with IDL</a>.</p>
    <p>When <a data-link-type="dfn" href="https://www.w3.org/TR/trusted-types/#dfn-validate-the-string-in-context" id="ref-for-dfn-validate-the-string-in-context①">validate the string in context</a> is invoked, with <var>platformObject</var>, <var>value</var>, <var>stringContext</var>, and <var>identifier</var> run these steps:</p>
    <ol>
     <li data-md>
-     <p>If <var>platformObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global⑤">relevant global object</a> has a <a data-link-type="dfn" href="#window-trusted-type-policy-factory" id="ref-for-window-trusted-type-policy-factory①">trusted type policy factory</a>:</p>
+     <p>If <var>platformObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global④">relevant global object</a> has a <a data-link-type="dfn" href="#window-trusted-type-policy-factory" id="ref-for-window-trusted-type-policy-factory①">trusted type policy factory</a>:</p>
      <ol>
       <li data-md>
-       <p>Set <var>sink</var> to the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-concatenate" id="ref-for-string-concatenate①">concatenating</a> the list « <var>platformObject</var>’s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-identifier" id="ref-for-dfn-identifier">identifier</a>, <var>identifier</var> » with <code>" "</code> as <var>separator</var>.</p>
+       <p>Set <var>sink</var> to the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-concatenate" id="ref-for-string-concatenate">concatenating</a> the list « <var>platformObject</var>’s <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-identifier" id="ref-for-dfn-identifier">identifier</a>, <var>identifier</var> » with <code>" "</code> as <var>separator</var>.</p>
        <div class="example" id="validate-string-example">
         <a class="self-link" href="#validate-string-example"></a> For example, the following annotation and JavaScript code: 
 <pre class="highlight"><c- b>typedef</c-> [<c- g>StringContext</c->=<c- n>TrustedHTML</c->] <c- b>DOMString</c-> <c- g>HTMLString</c->;
@@ -2367,7 +2336,7 @@ <h4 class="heading settled" data-level="4.3.6" id="html-validate-the-string-in-c
         <p>causes the <var>sink</var> value to be <code>"HTMLIFrameElement srcdoc"</code>.</p>
        </div>
       <li data-md>
-       <p>Set <var>value</var> to the result of running the <a data-link-type="abstract-op" href="#abstract-opdef-get-trusted-type-compliant-string" id="ref-for-abstract-opdef-get-trusted-type-compliant-string③">Get Trusted Type compliant string</a> algorithm, passing the following arguments:</p>
+       <p>Set <var>value</var> to the result of running the <a data-link-type="abstract-op" href="#abstract-opdef-get-trusted-type-compliant-string" id="ref-for-abstract-opdef-get-trusted-type-compliant-string②">Get Trusted Type compliant string</a> algorithm, passing the following arguments:</p>
        <ul>
         <li data-md>
          <p><var>value</var> as <var>input</var>,</p>
@@ -2378,7 +2347,7 @@ <h4 class="heading settled" data-level="4.3.6" id="html-validate-the-string-in-c
         <li data-md>
          <p><code>'script'</code> as <var>sinkGroup</var>,</p>
         <li data-md>
-         <p><var>platformObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global⑥">relevant global object</a> as <var>global</var>.</p>
+         <p><var>platformObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global⑤">relevant global object</a> as <var>global</var>.</p>
        </ul>
        <p class="issue" id="issue-adaa63a4"><a class="self-link" href="#issue-adaa63a4"></a> Remove hardcoding 'script' when new sink groups are specified.</p>
       <li data-md>
@@ -2434,7 +2403,7 @@ <h5 class="heading settled" data-level="4.6.1.1" id="require-trusted-types-for-p
      <p>Let <var>convertedScriptSource</var> be the result of executing <a data-link-type="abstract-op" href="#abstract-opdef-process-value-with-a-default-policy" id="ref-for-abstract-opdef-process-value-with-a-default-policy①">Process value with a default policy</a> algorithm, with the following arguments:</p>
      <ul>
       <li data-md>
-       <p><code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①③">TrustedScript</a></code> as <var>expectedType</var></p>
+       <p><code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①②">TrustedScript</a></code> as <var>expectedType</var></p>
       <li data-md>
        <p><var>request</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">clients</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global" id="ref-for-concept-settings-object-global">global object</a> as <var>global</var></p>
       <li data-md>
@@ -2442,7 +2411,7 @@ <h5 class="heading settled" data-level="4.6.1.1" id="require-trusted-types-for-p
       <li data-md>
        <p><code>"Location href"</code> as <var>sink</var></p>
      </ul>
-     <p>If that algorithm threw an error or <var>convertedScriptSource</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①④">TrustedScript</a></code> object, return "Blocked" and abort further steps.</p>
+     <p>If that algorithm threw an error or <var>convertedScriptSource</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①③">TrustedScript</a></code> object, return "Blocked" and abort further steps.</p>
     <li data-md>
      <p>Set <var>urlString</var> to be the result of prepending <code>"javascript:"</code> to stringified <var>convertedScriptSource</var>.</p>
     <li data-md>
@@ -2544,7 +2513,7 @@ <h4 class="heading settled" data-level="4.6.4" id="should-block-sink-type-mismat
       <li data-md>
        <p>Let <var>trimmedSource</var> be the substring of <var>source</var>, containing its first 40 characters.</p>
       <li data-md>
-       <p>Set <var>violation</var>’s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-csp/#violation-sample" id="ref-for-violation-sample">sample</a> to be the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-concatenate" id="ref-for-string-concatenate②">concatenating</a> the list « <var>sink</var>, <var>trimmedSource</var> « using <code>"|"</code> as a <var>separator</var>.</p>
+       <p>Set <var>violation</var>’s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-csp/#violation-sample" id="ref-for-violation-sample">sample</a> to be the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-concatenate" id="ref-for-string-concatenate①">concatenating</a> the list « <var>sink</var>, <var>trimmedSource</var> « using <code>"|"</code> as a <var>separator</var>.</p>
       <li data-md>
        <p>Execute <a href="https://w3c.github.io/webappsec-csp/#report-violation">Report a violation</a> on <var>violation</var>.</p>
       <li data-md>
@@ -2638,7 +2607,7 @@ <h4 class="heading settled" data-level="4.6.7" id="csp-eval"><span class="secno"
       <li data-md>
        <ins>Let <var>isTrusted</var> be <code>true</code>.</ins>
       <li data-md>
-       <ins>If <var>bodyArg</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑤">TrustedScript</a></code> object, set <var>isTrusted</var> to <code>false</code>.</ins>
+       <ins>If <var>bodyArg</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①④">TrustedScript</a></code> object, set <var>isTrusted</var> to <code>false</code>.</ins>
       <li data-md>
        <ins>
         If <var>isTrusted</var> is <code>true</code> then: 
@@ -2656,7 +2625,7 @@ <h4 class="heading settled" data-level="4.6.7" id="csp-eval"><span class="secno"
           <li data-md>
            <ins>Let <var>index</var> be the index of <var>arg</var> in <var>parameterArgs</var>.</ins>
           <li data-md>
-           <ins>If <var>arg</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑥">TrustedScript</a></code> object, set <var>isTrusted</var> to <code>false</code>.</ins>
+           <ins>If <var>arg</var> is not a <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑤">TrustedScript</a></code> object, set <var>isTrusted</var> to <code>false</code>.</ins>
           <li data-md>
            <ins>If <var>isTrusted</var> is <code>true</code>, then:</ins>
            <ol>
@@ -2667,11 +2636,11 @@ <h4 class="heading settled" data-level="4.6.7" id="csp-eval"><span class="secno"
        </ol>
       <li data-md>
        <ins>If <var>isTrusted</var> is <code>true</code>, let <var>sourceToValidate</var> be a new instance of
-the <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑦">TrustedScript</a></code> interface, with its <a data-link-type="dfn" href="#trustedscript-data" id="ref-for-trustedscript-data⑤">[[Data]]</a> internal slot value
+the <code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑥">TrustedScript</a></code> interface, with its <a data-link-type="dfn" href="#trustedscript-data" id="ref-for-trustedscript-data⑤">[[Data]]</a> internal slot value
 set to <var>source</var>. Otherwise, let <var>sourceToValidate</var> be <var>source</var>.</ins>
       <li data-md>
        <ins>
-        Let <var>sourceString</var> be the result of executing the <a data-link-type="abstract-op" href="#abstract-opdef-get-trusted-type-compliant-string" id="ref-for-abstract-opdef-get-trusted-type-compliant-string④">Get Trusted Type compliant string</a> algorithm, with: 
+        Let <var>sourceString</var> be the result of executing the <a data-link-type="abstract-op" href="#abstract-opdef-get-trusted-type-compliant-string" id="ref-for-abstract-opdef-get-trusted-type-compliant-string③">Get Trusted Type compliant string</a> algorithm, with: 
         <ul>
          <li data-md>
           <p><var>calleeRealm</var> as <var>global</var>,</p>
@@ -2682,7 +2651,7 @@ <h4 class="heading settled" data-level="4.6.7" id="csp-eval"><span class="secno"
          <li data-md>
           <p><code>'script'</code> as <var>sinkGroup</var>,</p>
          <li data-md>
-          <p><code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑧">TrustedScript</a></code> as <var>expectedType</var>.</p>
+          <p><code class="idl"><a data-link-type="idl" href="#trustedscript" id="ref-for-trustedscript①⑦">TrustedScript</a></code> as <var>expectedType</var>.</p>
         </ul>
        </ins>
       <li data-md>
@@ -2993,11 +2962,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="85394472">Document</span>
      <li><span class="dfn-paneled" id="296f3551">Element</span>
      <li><span class="dfn-paneled" id="2bc0cdf4">EventTarget</span>
-     <li><span class="dfn-paneled" id="d1a6c008">attribute change steps</span>
      <li><span class="dfn-paneled" id="631f76db">child text content</span>
      <li><span class="dfn-paneled" id="f20f4175">element interface</span>
-     <li><span class="dfn-paneled" id="e240317a">local name <small>(for Attr)</small></span>
-     <li><span class="dfn-paneled" id="83ca4a87">local name <small>(for Element)</small></span>
+     <li><span class="dfn-paneled" id="e240317a">local name</span>
      <li><span class="dfn-paneled" id="b3955a25">namespace</span>
      <li><span class="dfn-paneled" id="5216e1a0">node document</span>
      <li><span class="dfn-paneled" id="421cd2a4">textContent</span>
@@ -3139,6 +3106,7 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
   </dl>
   <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content">Issues Index</span><a class="self-link" href="#issues-index"></a></h2>
   <div style="counter-reset:issue">
+   <div class="issue"> This algorithm should account for event handler attributes. See https://github.com/w3c/trusted-types/issues/474 <a class="issue-return" href="#issue-74d98fc3" title="Jump to section">↵</a></div>
    <div class="issue"> See <a href="https://github.com/whatwg/webidl/pull/1392">https://github.com/whatwg/webidl/pull/1392</a>. <a class="issue-return" href="#issue-a7802be9" title="Jump to section">↵</a></div>
    <div class="issue"> Remove hardcoding 'script' when new sink groups are specified. <a class="issue-return" href="#issue-adaa63a4" title="Jump to section">↵</a></div>
    <div class="issue"> Refer to the external document on secure policy design. <a class="issue-return" href="#issue-2eb927d2" title="Jump to section">↵</a></div>
@@ -3885,11 +3853,9 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['85394472'] = {"dfnID": "85394472", "url": "https://dom.spec.whatwg.org/#document", "dfnText": "Document", "refSections": [{"refs": [{"id": "ref-for-document"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-document\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-document\u2461"}], "title": "4.5. Integration with execCommand"}], "external": true};
 window.dfnpanelData['296f3551'] = {"dfnID": "296f3551", "url": "https://dom.spec.whatwg.org/#element", "dfnText": "Element", "refSections": [{"refs": [{"id": "ref-for-element"}, {"id": "ref-for-element\u2460"}], "title": "2.1.1. DOM XSS injection sinks"}, {"refs": [{"id": "ref-for-element\u2461"}, {"id": "ref-for-element\u2462"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-element\u2463"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
 window.dfnpanelData['2bc0cdf4'] = {"dfnID": "2bc0cdf4", "url": "https://dom.spec.whatwg.org/#eventtarget", "dfnText": "EventTarget", "refSections": [{"refs": [{"id": "ref-for-eventtarget"}], "title": "4.4. Integration with Service Workers"}], "external": true};
-window.dfnpanelData['d1a6c008'] = {"dfnID": "d1a6c008", "url": "https://dom.spec.whatwg.org/#concept-element-attributes-change-ext", "dfnText": "attribute change steps", "refSections": [{"refs": [{"id": "ref-for-concept-element-attributes-change-ext"}], "title": "4.3.4. Enforcement in event handler content attributes"}], "external": true};
 window.dfnpanelData['631f76db'] = {"dfnID": "631f76db", "url": "https://dom.spec.whatwg.org/#concept-child-text-content", "dfnText": "child text content", "refSections": [{"refs": [{"id": "ref-for-concept-child-text-content"}, {"id": "ref-for-concept-child-text-content\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2461"}], "title": "4.3.2.1. Slots with trusted values"}, {"refs": [{"id": "ref-for-concept-child-text-content\u2462"}], "title": "4.3.2.2. Setting slot values"}, {"refs": [{"id": "script-processing-model:child-text-content"}], "title": "4.3.2.3. Slot value verification"}], "external": true};
 window.dfnpanelData['f20f4175'] = {"dfnID": "f20f4175", "url": "https://dom.spec.whatwg.org/#concept-element-interface", "dfnText": "element interface", "refSections": [{"refs": [{"id": "ref-for-concept-element-interface"}, {"id": "ref-for-concept-element-interface\u2460"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
-window.dfnpanelData['e240317a'] = {"dfnID": "e240317a", "url": "https://dom.spec.whatwg.org/#concept-attribute-local-name", "dfnText": "local name (for Attr)", "refSections": [{"refs": [{"id": "ref-for-concept-attribute-local-name"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
-window.dfnpanelData['83ca4a87'] = {"dfnID": "83ca4a87", "url": "https://dom.spec.whatwg.org/#concept-element-local-name", "dfnText": "local name (for Element)", "refSections": [{"refs": [{"id": "ref-for-concept-element-local-name"}], "title": "4.3.4. Enforcement in event handler content attributes"}], "external": true};
+window.dfnpanelData['e240317a'] = {"dfnID": "e240317a", "url": "https://dom.spec.whatwg.org/#concept-attribute-local-name", "dfnText": "local name", "refSections": [{"refs": [{"id": "ref-for-concept-attribute-local-name"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
 window.dfnpanelData['b3955a25'] = {"dfnID": "b3955a25", "url": "https://dom.spec.whatwg.org/#concept-attribute-namespace", "dfnText": "namespace", "refSections": [{"refs": [{"id": "ref-for-concept-attribute-namespace"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
 window.dfnpanelData['5216e1a0'] = {"dfnID": "5216e1a0", "url": "https://dom.spec.whatwg.org/#concept-node-document", "dfnText": "node document", "refSections": [{"refs": [{"id": "ref-for-concept-node-document"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
 window.dfnpanelData['421cd2a4'] = {"dfnID": "421cd2a4", "url": "https://dom.spec.whatwg.org/#dom-node-textcontent", "dfnText": "textContent", "refSections": [{"refs": [{"id": "ref-for-dom-node-textcontent"}, {"id": "ref-for-dom-node-textcontent\u2460"}], "title": "4.3.2.2. Setting slot values"}], "external": true};
@@ -3914,11 +3880,11 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['215d47ca'] = {"dfnID": "215d47ca", "url": "https://html.spec.whatwg.org/#prepare-the-script-element", "dfnText": "prepare the script element", "refSections": [{"refs": [{"id": "ref-for-prepare-the-script-element"}], "title": "4.3.2.3. Slot value verification"}], "external": true};
 window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.3. Policies"}, {"refs": [{"id": "ref-for-concept-global-object-realm\u2460"}], "title": "4.6.1. require-trusted-types-for directive"}], "external": true};
 window.dfnpanelData['5ab7b520'] = {"dfnID": "5ab7b520", "url": "https://html.spec.whatwg.org/multipage/common-dom-interfaces.html#reflect", "dfnText": "reflect", "refSections": [{"refs": [{"id": "ref-for-reflect"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
-window.dfnpanelData['e99bd18e'] = {"dfnID": "e99bd18e", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global", "dfnText": "relevant global object", "refSections": [{"refs": [{"id": "ref-for-concept-relevant-global"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2461"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2462"}], "title": "4.3.1. Extensions to the WindowOrWorkerGlobalScope interface"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2463"}], "title": "4.3.4. Enforcement in event handler content attributes"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2464"}, {"id": "ref-for-concept-relevant-global\u2465"}], "title": "4.3.6. Validate the string in context"}], "external": true};
+window.dfnpanelData['e99bd18e'] = {"dfnID": "e99bd18e", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global", "dfnText": "relevant global object", "refSections": [{"refs": [{"id": "ref-for-concept-relevant-global"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2461"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2462"}], "title": "4.3.1. Extensions to the WindowOrWorkerGlobalScope interface"}, {"refs": [{"id": "ref-for-concept-relevant-global\u2463"}, {"id": "ref-for-concept-relevant-global\u2464"}], "title": "4.3.5. Validate the string in context"}], "external": true};
 window.dfnpanelData['7f9469b5'] = {"dfnID": "7f9469b5", "url": "https://infra.spec.whatwg.org/#ascii-case-insensitive", "dfnText": "ascii case-insensitive", "refSections": [{"refs": [{"id": "ref-for-ascii-case-insensitive"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": true};
 window.dfnpanelData['6f2dfa22'] = {"dfnID": "6f2dfa22", "url": "https://infra.spec.whatwg.org/#ascii-lowercase", "dfnText": "ascii lowercase", "refSections": [{"refs": [{"id": "ref-for-ascii-lowercase"}, {"id": "ref-for-ascii-lowercase\u2460"}, {"id": "ref-for-ascii-lowercase\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['77b4c09a'] = {"dfnID": "77b4c09a", "url": "https://infra.spec.whatwg.org/#assert", "dfnText": "assert", "refSections": [{"refs": [{"id": "ref-for-assert"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
-window.dfnpanelData['4a3bf5fb'] = {"dfnID": "4a3bf5fb", "url": "https://infra.spec.whatwg.org/#string-concatenate", "dfnText": "concatenate", "refSections": [{"refs": [{"id": "ref-for-string-concatenate"}], "title": "4.3.4. Enforcement in event handler content attributes"}, {"refs": [{"id": "ref-for-string-concatenate\u2460"}], "title": "4.3.6. Validate the string in context"}, {"refs": [{"id": "ref-for-string-concatenate\u2461"}], "title": "4.6.4. Should sink type mismatch violation be blocked by Content Security Policy?"}], "external": true};
+window.dfnpanelData['4a3bf5fb'] = {"dfnID": "4a3bf5fb", "url": "https://infra.spec.whatwg.org/#string-concatenate", "dfnText": "concatenate", "refSections": [{"refs": [{"id": "ref-for-string-concatenate"}], "title": "4.3.5. Validate the string in context"}, {"refs": [{"id": "ref-for-string-concatenate\u2460"}], "title": "4.6.4. Should sink type mismatch violation be blocked by Content Security Policy?"}], "external": true};
 window.dfnpanelData['ae8def21'] = {"dfnID": "ae8def21", "url": "https://infra.spec.whatwg.org/#list-contain", "dfnText": "contain", "refSections": [{"refs": [{"id": "ref-for-list-contain"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": true};
 window.dfnpanelData['f052b1ea'] = {"dfnID": "f052b1ea", "url": "https://infra.spec.whatwg.org/#html-namespace", "dfnText": "html namespace", "refSections": [{"refs": [{"id": "ref-for-html-namespace"}, {"id": "ref-for-html-namespace\u2460"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
@@ -3927,7 +3893,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['5233fc8c'] = {"dfnID": "5233fc8c", "url": "https://w3c.github.io/ServiceWorker/#serviceworkercontainer", "dfnText": "ServiceWorkerContainer", "refSections": [{"refs": [{"id": "ref-for-serviceworkercontainer"}], "title": "4.4. Integration with Service Workers"}], "external": true};
 window.dfnpanelData['a51ea74c'] = {"dfnID": "a51ea74c", "url": "https://w3c.github.io/ServiceWorker/#serviceworkerregistration", "dfnText": "ServiceWorkerRegistration", "refSections": [{"refs": [{"id": "ref-for-serviceworkerregistration"}], "title": "4.4. Integration with Service Workers"}], "external": true};
 window.dfnpanelData['d347f2e7'] = {"dfnID": "d347f2e7", "url": "https://svgwg.org/svg2-draft/interact.html#InterfaceSVGScriptElement", "dfnText": "SVGScriptElement", "refSections": [{"refs": [{"id": "ref-for-InterfaceSVGScriptElement"}, {"id": "ref-for-InterfaceSVGScriptElement\u2460"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": true};
-window.dfnpanelData['a88fced2'] = {"dfnID": "a88fced2", "url": "https://www.w3.org/TR/trusted-types/#dfn-validate-the-string-in-context", "dfnText": "validate the string in context", "refSections": [{"refs": [{"id": "ref-for-dfn-validate-the-string-in-context"}, {"id": "ref-for-dfn-validate-the-string-in-context\u2460"}], "title": "4.3.6. Validate the string in context"}], "external": true};
+window.dfnpanelData['a88fced2'] = {"dfnID": "a88fced2", "url": "https://www.w3.org/TR/trusted-types/#dfn-validate-the-string-in-context", "dfnText": "validate the string in context", "refSections": [{"refs": [{"id": "ref-for-dfn-validate-the-string-in-context"}, {"id": "ref-for-dfn-validate-the-string-in-context\u2460"}], "title": "4.3.5. Validate the string in context"}], "external": true};
 window.dfnpanelData['3a711be7'] = {"dfnID": "3a711be7", "url": "https://url.spec.whatwg.org/#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}], "external": true};
 window.dfnpanelData['ca3ca4ae'] = {"dfnID": "ca3ca4ae", "url": "https://url.spec.whatwg.org/#concept-url-parser", "dfnText": "url parser", "refSections": [{"refs": [{"id": "ref-for-concept-url-parser"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}], "external": true};
 window.dfnpanelData['5442ea33'] = {"dfnID": "5442ea33", "url": "https://url.spec.whatwg.org/#concept-url-serializer", "dfnText": "url serializer", "refSections": [{"refs": [{"id": "ref-for-concept-url-serializer"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}], "external": true};
@@ -3943,7 +3909,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['6c6b1005'] = {"dfnID": "6c6b1005", "url": "https://webidl.spec.whatwg.org/#idl-any", "dfnText": "any", "refSections": [{"refs": [{"id": "ref-for-idl-any"}, {"id": "ref-for-idl-any\u2460"}, {"id": "ref-for-idl-any\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-idl-any\u2462"}, {"id": "ref-for-idl-any\u2463"}, {"id": "ref-for-idl-any\u2464"}], "title": "2.3.2. TrustedTypePolicy"}, {"refs": [{"id": "ref-for-idl-any\u2465"}, {"id": "ref-for-idl-any\u2466"}, {"id": "ref-for-idl-any\u2467"}], "title": "2.3.3. TrustedTypePolicyOptions"}, {"refs": [{"id": "ref-for-idl-any\u2468"}, {"id": "ref-for-idl-any\u2460\u24ea"}], "title": "4.3.3. Enforcement in timer functions"}], "external": true};
 window.dfnpanelData['5bf9ea61'] = {"dfnID": "5bf9ea61", "url": "https://webidl.spec.whatwg.org/#dfn-attribute", "dfnText": "attribute", "refSections": [{"refs": [{"id": "ref-for-dfn-attribute"}, {"id": "ref-for-dfn-attribute\u2460"}, {"id": "ref-for-dfn-attribute\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['5372cca8'] = {"dfnID": "5372cca8", "url": "https://webidl.spec.whatwg.org/#idl-boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-idl-boolean"}, {"id": "ref-for-idl-boolean\u2460"}, {"id": "ref-for-idl-boolean\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-idl-boolean\u2462"}, {"id": "ref-for-idl-boolean\u2463"}], "title": "4.5. Integration with execCommand"}], "external": true};
-window.dfnpanelData['980252f2'] = {"dfnID": "980252f2", "url": "https://webidl.spec.whatwg.org/#dfn-identifier", "dfnText": "identifier", "refSections": [{"refs": [{"id": "ref-for-dfn-identifier"}], "title": "4.3.6. Validate the string in context"}], "external": true};
+window.dfnpanelData['980252f2'] = {"dfnID": "980252f2", "url": "https://webidl.spec.whatwg.org/#dfn-identifier", "dfnText": "identifier", "refSections": [{"refs": [{"id": "ref-for-dfn-identifier"}], "title": "4.3.5. Validate the string in context"}], "external": true};
 window.dfnpanelData['a7900362'] = {"dfnID": "a7900362", "url": "https://webidl.spec.whatwg.org/#include", "dfnText": "include", "refSections": [{"refs": [{"id": "ref-for-include"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['d08c79a9'] = {"dfnID": "d08c79a9", "url": "https://webidl.spec.whatwg.org/#interface-mixin", "dfnText": "interface mixin", "refSections": [{"refs": [{"id": "ref-for-interface-mixin"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": true};
 window.dfnpanelData['f8de33a3'] = {"dfnID": "f8de33a3", "url": "https://webidl.spec.whatwg.org/#idl-long", "dfnText": "long", "refSections": [{"refs": [{"id": "ref-for-idl-long"}, {"id": "ref-for-idl-long\u2460"}, {"id": "ref-for-idl-long\u2461"}, {"id": "ref-for-idl-long\u2462"}], "title": "4.3.3. Enforcement in timer functions"}], "external": true};
@@ -3954,7 +3920,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['trustedhtml-data'] = {"dfnID": "trustedhtml-data", "url": "#trustedhtml-data", "dfnText": "[[Data]]", "refSections": [{"refs": [{"id": "ref-for-trustedhtml-data"}], "title": "2.2.1. TrustedHTML"}, {"refs": [{"id": "ref-for-trustedhtml-data\u2460"}, {"id": "ref-for-trustedhtml-data\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": false};
 window.dfnpanelData['dom-trustedhtml-tojson'] = {"dfnID": "dom-trustedhtml-tojson", "url": "#dom-trustedhtml-tojson", "dfnText": "toJSON()", "refSections": [{"refs": [{"id": "ref-for-dom-trustedhtml-tojson"}], "title": "2.2.1. TrustedHTML"}], "external": false};
 window.dfnpanelData['trustedhtml-stringification-behavior'] = {"dfnID": "trustedhtml-stringification-behavior", "url": "#trustedhtml-stringification-behavior", "dfnText": "stringification behavior", "refSections": [{"refs": [{"id": "ref-for-trustedhtml-stringification-behavior"}], "title": "2.2.1. TrustedHTML"}], "external": false};
-window.dfnpanelData['trustedscript'] = {"dfnID": "trustedscript", "url": "#trustedscript", "dfnText": "TrustedScript", "refSections": [{"refs": [{"id": "ref-for-trustedscript"}], "title": "2.2.2. TrustedScript"}, {"refs": [{"id": "ref-for-trustedscript\u2460"}, {"id": "ref-for-trustedscript\u2461"}, {"id": "ref-for-trustedscript\u2462"}, {"id": "ref-for-trustedscript\u2463"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-trustedscript\u2464"}], "title": "2.3.2. TrustedTypePolicy"}, {"refs": [{"id": "ref-for-trustedscript\u2465"}], "title": "3.2. Create a Trusted Type"}, {"refs": [{"id": "ref-for-trustedscript\u2466"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-trustedscript\u2467"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-trustedscript\u2468"}, {"id": "ref-for-trustedscript\u2460\u24ea"}], "title": "4. Integrations"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2460"}], "title": "4.3.3. Enforcement in timer functions"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2461"}], "title": "4.3.4. Enforcement in event handler content attributes"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2462"}, {"id": "ref-for-trustedscript\u2460\u2463"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2464"}, {"id": "ref-for-trustedscript\u2460\u2465"}, {"id": "ref-for-trustedscript\u2460\u2466"}, {"id": "ref-for-trustedscript\u2460\u2467"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": false};
+window.dfnpanelData['trustedscript'] = {"dfnID": "trustedscript", "url": "#trustedscript", "dfnText": "TrustedScript", "refSections": [{"refs": [{"id": "ref-for-trustedscript"}], "title": "2.2.2. TrustedScript"}, {"refs": [{"id": "ref-for-trustedscript\u2460"}, {"id": "ref-for-trustedscript\u2461"}, {"id": "ref-for-trustedscript\u2462"}, {"id": "ref-for-trustedscript\u2463"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-trustedscript\u2464"}], "title": "2.3.2. TrustedTypePolicy"}, {"refs": [{"id": "ref-for-trustedscript\u2465"}], "title": "3.2. Create a Trusted Type"}, {"refs": [{"id": "ref-for-trustedscript\u2466"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-trustedscript\u2467"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-trustedscript\u2468"}, {"id": "ref-for-trustedscript\u2460\u24ea"}], "title": "4. Integrations"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2460"}], "title": "4.3.3. Enforcement in timer functions"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2461"}, {"id": "ref-for-trustedscript\u2460\u2462"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}, {"refs": [{"id": "ref-for-trustedscript\u2460\u2463"}, {"id": "ref-for-trustedscript\u2460\u2464"}, {"id": "ref-for-trustedscript\u2460\u2465"}, {"id": "ref-for-trustedscript\u2460\u2466"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": false};
 window.dfnpanelData['trustedscript-data'] = {"dfnID": "trustedscript-data", "url": "#trustedscript-data", "dfnText": "[[Data]]", "refSections": [{"refs": [{"id": "ref-for-trustedscript-data"}], "title": "2.2.2. TrustedScript"}, {"refs": [{"id": "ref-for-trustedscript-data\u2460"}, {"id": "ref-for-trustedscript-data\u2461"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-trustedscript-data\u2462"}, {"id": "ref-for-trustedscript-data\u2463"}, {"id": "ref-for-trustedscript-data\u2464"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": false};
 window.dfnpanelData['dom-trustedscript-tojson'] = {"dfnID": "dom-trustedscript-tojson", "url": "#dom-trustedscript-tojson", "dfnText": "toJSON()", "refSections": [{"refs": [{"id": "ref-for-dom-trustedscript-tojson"}], "title": "2.2.2. TrustedScript"}], "external": false};
 window.dfnpanelData['trustedscript-stringification-behavior'] = {"dfnID": "trustedscript-stringification-behavior", "url": "#trustedscript-stringification-behavior", "dfnText": "stringification behavior", "refSections": [{"refs": [{"id": "ref-for-trustedscript-stringification-behavior"}], "title": "2.2.2. TrustedScript"}], "external": false};
@@ -3990,14 +3956,14 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['abstract-opdef-create-a-trusted-type-policy'] = {"dfnID": "abstract-opdef-create-a-trusted-type-policy", "url": "#abstract-opdef-create-a-trusted-type-policy", "dfnText": "Create a Trusted Type Policy", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-create-a-trusted-type-policy"}], "title": "2.3.1. TrustedTypePolicyFactory"}], "external": false};
 window.dfnpanelData['abstract-opdef-create-a-trusted-type'] = {"dfnID": "abstract-opdef-create-a-trusted-type", "url": "#abstract-opdef-create-a-trusted-type", "dfnText": "Create a Trusted Type", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-create-a-trusted-type"}, {"id": "ref-for-abstract-opdef-create-a-trusted-type\u2460"}, {"id": "ref-for-abstract-opdef-create-a-trusted-type\u2461"}], "title": "2.3.2. TrustedTypePolicy"}], "external": false};
 window.dfnpanelData['abstract-opdef-get-trusted-type-policy-value'] = {"dfnID": "abstract-opdef-get-trusted-type-policy-value", "url": "#abstract-opdef-get-trusted-type-policy-value", "dfnText": "Get Trusted Type policy value", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-policy-value"}], "title": "3.2. Create a Trusted Type"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-policy-value\u2460"}], "title": "3.5. Process value with a default policy"}], "external": false};
-window.dfnpanelData['abstract-opdef-get-trusted-type-compliant-string'] = {"dfnID": "abstract-opdef-get-trusted-type-compliant-string", "url": "#abstract-opdef-get-trusted-type-compliant-string", "dfnText": "Get Trusted Type compliant string", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2460"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2461"}], "title": "4.3.4. Enforcement in event handler content attributes"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2462"}], "title": "4.3.6. Validate the string in context"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2463"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": false};
+window.dfnpanelData['abstract-opdef-get-trusted-type-compliant-string'] = {"dfnID": "abstract-opdef-get-trusted-type-compliant-string", "url": "#abstract-opdef-get-trusted-type-compliant-string", "dfnText": "Get Trusted Type compliant string", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2460"}], "title": "3.7. Get Trusted Types-compliant attribute value"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2461"}], "title": "4.3.5. Validate the string in context"}, {"refs": [{"id": "ref-for-abstract-opdef-get-trusted-type-compliant-string\u2462"}], "title": "4.6.7. Support for dynamic code compilation"}], "external": false};
 window.dfnpanelData['abstract-opdef-process-value-with-a-default-policy'] = {"dfnID": "abstract-opdef-process-value-with-a-default-policy", "url": "#abstract-opdef-process-value-with-a-default-policy", "dfnText": "Process value with a default policy", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-process-value-with-a-default-policy"}], "title": "3.4. Get Trusted Type compliant string"}, {"refs": [{"id": "ref-for-abstract-opdef-process-value-with-a-default-policy\u2460"}], "title": "4.6.1.1. require-trusted-types-for Pre-Navigation check"}], "external": false};
 window.dfnpanelData['abstract-opdef-prepare-the-script-text'] = {"dfnID": "abstract-opdef-prepare-the-script-text", "url": "#abstract-opdef-prepare-the-script-text", "dfnText": "Prepare the script text", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-prepare-the-script-text"}], "title": "4.3.2.3. Slot value verification"}], "external": false};
 window.dfnpanelData['typedefdef-scriptstring'] = {"dfnID": "typedefdef-scriptstring", "url": "#typedefdef-scriptstring", "dfnText": "ScriptString", "refSections": [{"refs": [{"id": "ref-for-typedefdef-scriptstring"}, {"id": "ref-for-typedefdef-scriptstring\u2460"}, {"id": "ref-for-typedefdef-scriptstring\u2461"}], "title": "4.3.2.2. Setting slot values"}, {"refs": [{"id": "ref-for-typedefdef-scriptstring\u2462"}], "title": "4.3.3. Enforcement in timer functions"}], "external": false};
 window.dfnpanelData['typedefdef-scripturlstring'] = {"dfnID": "typedefdef-scripturlstring", "url": "#typedefdef-scripturlstring", "dfnText": "ScriptURLString", "refSections": [{"refs": [{"id": "ref-for-typedefdef-scripturlstring"}], "title": "4.3.2.2. Setting slot values"}, {"refs": [{"id": "ref-for-typedefdef-scripturlstring\u2460"}, {"id": "ref-for-typedefdef-scripturlstring\u2461"}], "title": "4.4. Integration with Service Workers"}], "external": false};
 window.dfnpanelData['typedefdef-trustedtype'] = {"dfnID": "typedefdef-trustedtype", "url": "#typedefdef-trustedtype", "dfnText": "TrustedType", "refSections": [{"refs": [{"id": "ref-for-typedefdef-trustedtype"}, {"id": "ref-for-typedefdef-trustedtype\u2460"}], "title": "3.4. Get Trusted Type compliant string"}, {"refs": [{"id": "ref-for-typedefdef-trustedtype\u2461"}, {"id": "ref-for-typedefdef-trustedtype\u2462"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-typedefdef-trustedtype\u2463"}], "title": "3.7. Get Trusted Types-compliant attribute value"}], "external": false};
 window.dfnpanelData['StringContext'] = {"dfnID": "StringContext", "url": "#StringContext", "dfnText": "4.2. [StringContext]", "refSections": [{"refs": [{"id": "ref-for-StringContext"}, {"id": "ref-for-StringContext\u2460"}, {"id": "ref-for-StringContext\u2461"}, {"id": "ref-for-StringContext\u2462"}], "title": "2.3.1. TrustedTypePolicyFactory"}, {"refs": [{"id": "ref-for-StringContext\u2463"}, {"id": "ref-for-StringContext\u2464"}, {"id": "ref-for-StringContext\u2465"}], "title": "4. Integrations"}, {"refs": [{"id": "ref-for-StringContext"}], "title": "4.2. [StringContext]"}, {"refs": [{"id": "ref-for-StringContext\u2466"}], "title": "4.3.2.1. Slots with trusted values"}, {"refs": [{"id": "ref-for-StringContext\u2467"}], "title": "4.3.2.2. Setting slot values"}], "external": false};
-window.dfnpanelData['window-trusted-type-policy-factory'] = {"dfnID": "window-trusted-type-policy-factory", "url": "#window-trusted-type-policy-factory", "dfnText": "trusted type policy factory", "refSections": [{"refs": [{"id": "ref-for-window-trusted-type-policy-factory"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-window-trusted-type-policy-factory\u2460"}], "title": "4.3.6. Validate the string in context"}], "external": false};
+window.dfnpanelData['window-trusted-type-policy-factory'] = {"dfnID": "window-trusted-type-policy-factory", "url": "#window-trusted-type-policy-factory", "dfnText": "trusted type policy factory", "refSections": [{"refs": [{"id": "ref-for-window-trusted-type-policy-factory"}], "title": "3.5. Process value with a default policy"}, {"refs": [{"id": "ref-for-window-trusted-type-policy-factory\u2460"}], "title": "4.3.5. Validate the string in context"}], "external": false};
 window.dfnpanelData['dom-windoworworkerglobalscope-trustedtypes'] = {"dfnID": "dom-windoworworkerglobalscope-trustedtypes", "url": "#dom-windoworworkerglobalscope-trustedtypes", "dfnText": "trustedTypes", "refSections": [{"refs": [{"id": "ref-for-dom-windoworworkerglobalscope-trustedtypes"}], "title": "2.4. Enforcement"}, {"refs": [{"id": "ref-for-dom-windoworworkerglobalscope-trustedtypes\u2460"}], "title": "4.3.1. Extensions to the WindowOrWorkerGlobalScope interface"}], "external": false};
 window.dfnpanelData['dom-htmlscriptelement-scripttext-slot'] = {"dfnID": "dom-htmlscriptelement-scripttext-slot", "url": "#dom-htmlscriptelement-scripttext-slot", "dfnText": "[[ScriptText]]", "refSections": [{"refs": [{"id": "ref-for-dom-htmlscriptelement-scripttext-slot"}, {"id": "ref-for-dom-htmlscriptelement-scripttext-slot\u2460"}], "title": "3.6. Prepare the script text"}, {"refs": [{"id": "ref-for-dom-htmlscriptelement-scripttext-slot\u2461"}], "title": "4.3.2.2. Setting slot values"}], "external": false};
 window.dfnpanelData['dom-htmlscriptelement-src'] = {"dfnID": "dom-htmlscriptelement-src", "url": "#dom-htmlscriptelement-src", "dfnText": "src", "refSections": [{"refs": [{"id": "ref-for-dom-htmlscriptelement-src"}], "title": "2.1.1. DOM XSS injection sinks"}], "external": false};