trusted-types
trusted-types copied to clipboard
Should the default policy be invoked when trusted types are not required?
https://w3c.github.io/trusted-types/dist/spec/#get-trusted-type-compliant-string-algorithm step 3 returns if no trusted types are required.
That section is normative. The non-normative section about the default policy (https://w3c.github.io/trusted-types/dist/spec/#default-policy-hdr) doesn't mention that aspect.
It seems more intuitive to invoke the default policy.