Similar to angular.io we may want to enable trusted types and enforce them through the content security policy header. This will help us also validate the Angular's framework compatibility/support with trusted types.