Explore using `trusted-types` and `require-using-trusted-types-for` in the CSP
<!--IssueSummary start-->
<details>
<summary>
Everyone can contribute. [Help move this issue forward](https://handbook.gitlab.com/handbook/marketing/developer-relations/contributor-success/community-contributors-workflows/#contributor-links) while earning points, leveling up and collecting rewards.
</summary>
- [Close this issue](https://contributors.gitlab.com/manage-issue?action=close&projectId=278964&issueIid=479127)
</details>
<!--IssueSummary end-->
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/require-trusted-types-for
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types
These are meant to prevent DOM XSS by preventing unsanitized strings from being assigned to DOM elements. As of today (2024-08-14) these CSP directives are considered experimental are not supported in Firefox and Safari.
issue