Acceptance criteria

• The listed features are documented sufficiently on MDN
• BCD is updated
• Interactive example and data repos are updated if appropriate
• The content has been reviewed as needed

For folks helping with Firefox related documentation

• Set bugs to dev-doc-complete
• Add entry to Firefox release notes for enabled/preview features
• Add/remove entry to Firefox experimental features page for preference/released features

Related Gecko bugs

• https://bugzilla.mozilla.org/show_bug.cgi?id=1906301 - Implement Trusted Types support for document.write()/document.writeln() - 135
  • BCD updated
  • Docs
• https://bugzilla.mozilla.org/show_bug.cgi?id=1905706 - HTMLScriptElement attr src/innerText/textContent/text - 135
  • BCD updated
  • Docs
    • HTMLScriptElement.text - trustedTypes for scripts #41128
    • src/innerText/textContent
• https://bugzilla.mozilla.org/show_bug.cgi?id=1931290 - Window.setInterval()/setTimeout()
  • BCD updated
  • Docs

These ones for 136

• https://bugzilla.mozilla.org/show_bug.cgi?id=1940049 SVGAnimatedString.baseVal
  • BCD Add Trusted Types subfeatures to various APIs browser-compat-data#27836
  • Docs
• https://bugzilla.mozilla.org/show_bug.cgi?id=1931293 WorkerGlobalScope.importScripts()
  • BCD Add Trusted Types subfeatures to various APIs browser-compat-data#27836
  • Docs
• https://bugzilla.mozilla.org/show_bug.cgi?id=1940044 ServiceWorkerContainer.register() - TrustedScriptURL
  • BCD Add Trusted Types subfeatures to various APIs browser-compat-data#27836
  • Docs

Note these ones for 137

• https://bugzilla.mozilla.org/show_bug.cgi?id=1944504 onmessage and onreadystatechange attributes - not sure what this means. Asking in https://bugzilla.mozilla.org/show_bug.cgi?id=1944504#c8
  • BCD
  • Docs

These for 138

• https://bugzilla.mozilla.org/show_bug.cgi?id=1942306 Content-Security-Policy: trusted-types - support for setting the allowed trusted type policy names
  • BCD Add Trusted Types subfeatures to various APIs browser-compat-data#27836
  • Docs - Already OK

These for 144

• https://bugzilla.mozilla.org/show_bug.cgi?id=1928932 see https://bugzilla.mozilla.org/show_bug.cgi?id=1928932#c21. If CSP enabled, this
  • enforces TT for assignment of script to text -

    let script = document.createElement("script");
    script.text = "/* arbitrary JS code */"; 

  • Check at the script execution part for cases where script is about to be executed because there are cases other than direct assignment of text, where the API does not lend itself to TT (read above link). I think action here is to update TT docs to make it clear these kinds of check exist.

    let script = document.createElement("script");
    script.appendChild(document.createTextNode("/* arbitrary JS code */"));
    document.body.appendChild(script);

Other

• Check content open issues to see if any pertain to the subject matter. If there are any that can be closed because of the work, do so. If there are any that can be fixed relatively quickly because of the knowledge from completing this issue and you have time, feel free to go ahead and fix them.