firebase-js-sdk icon indicating copy to clipboard operation
firebase-js-sdk copied to clipboard

Use safevalues to fix trusted types issues reported by tsec

Open dlarocque opened this issue 8 months ago • 4 comments

This fixes all but two errors reported by yarn trusted-type-check, by using https://github.com/google/safevalues. The other error fixes won't be included in this PR since they require some refactoring.

In Analytics, we already used TrustedTypes, but tsec reports an error saying that it does not allow this without a security review. So, the usage of TrustedTypes has been replaced with safevalues.

Please ignore the stray rules-unit-testing/functions/yarn.lock change, it will go away once #8298 is merged

dlarocque avatar Jun 05 '24 21:06 dlarocque