LibWeb: First implementation of the TrustedTypePolicyFactory

Most of the functions are either not implemented of filled with dummy
values.

Author: tete17

Libraries/LibWeb/CMakeLists.txt

@@ -878,6 +878,7 @@ set(SOURCES
     SVG/SVGViewElement.cpp
     SVG/TagNames.cpp
     SVG/ViewBox.cpp
+    TrustedTypes/TrustedTypePolicyFactory.cpp
     UIEvents/CompositionEvent.cpp
     UIEvents/EventNames.cpp
     UIEvents/FocusEvent.cpp

Libraries/LibWeb/Forward.h

@@ -1183,3 +1183,9 @@ template<>
 ErrorOr<Web::UniqueNodeID> decode(Decoder&);
 
 }
+
+namespace Web::TrustedTypes {
+
+class TrustedTypePolicyFactory;
+
+}

Libraries/LibWeb/HTML/WindowOrWorkerGlobalScope.cpp

@@ -43,6 +43,7 @@
 #include <LibWeb/Platform/ImageCodecPlugin.h>
 #include <LibWeb/ResourceTiming/PerformanceResourceTiming.h>
 #include <LibWeb/ServiceWorker/CacheStorage.h>
+#include <LibWeb/TrustedTypes/TrustedTypePolicyFactory.h>
 #include <LibWeb/UserTiming/PerformanceMark.h>
 #include <LibWeb/UserTiming/PerformanceMeasure.h>
 #include <LibWeb/WebIDL/AbstractOperations.h>
@@ -82,6 +83,7 @@ void WindowOrWorkerGlobalScopeMixin::visit_edges(JS::Cell::Visitor& visitor)
     visitor.visit(m_crypto);
     visitor.visit(m_cache_storage);
     visitor.visit(m_resource_timing_secondary_buffer);
+    visitor.visit(m_trusted_type_policy_factory);
 }
 
 void WindowOrWorkerGlobalScopeMixin::finalize()
@@ -1122,4 +1124,15 @@ GC::Ref<ServiceWorker::CacheStorage> WindowOrWorkerGlobalScopeMixin::caches()
     return GC::Ref { *m_cache_storage };
 }
 
+// https://w3c.github.io/trusted-types/dist/spec/#extensions-to-the-windoworworkerglobalscope-interface
+GC::Ref<TrustedTypes::TrustedTypePolicyFactory> WindowOrWorkerGlobalScopeMixin::trusted_types()
+{
+    auto const& platform_object = this_impl();
+    auto& realm = platform_object.realm();
+
+    if (!m_trusted_type_policy_factory)
+        m_trusted_type_policy_factory = realm.create<TrustedTypes::TrustedTypePolicyFactory>(realm);
+    return *m_trusted_type_policy_factory;
+}
+
 }

Libraries/LibWeb/HTML/WindowOrWorkerGlobalScope.h

@@ -103,6 +103,8 @@ class WindowOrWorkerGlobalScopeMixin {
 
     [[nodiscard]] GC::Ref<ServiceWorker::CacheStorage> caches();
 
+    [[nodiscard]] GC::Ref<TrustedTypes::TrustedTypePolicyFactory> trusted_types();
+
 protected:
     void initialize(JS::Realm&);
     void visit_edges(JS::Cell::Visitor&);
@@ -151,6 +153,8 @@ class WindowOrWorkerGlobalScopeMixin {
 
     GC::Ptr<ServiceWorker::CacheStorage> m_cache_storage;
 
+    GC::Ptr<TrustedTypes::TrustedTypePolicyFactory> m_trusted_type_policy_factory;
+
     bool m_error_reporting_mode { false };
 
     WebSockets::WebSocket::List m_registered_web_sockets;

Libraries/LibWeb/HTML/WindowOrWorkerGlobalScope.idl

@@ -6,6 +6,7 @@
 #import <HTML/MessagePort.idl>
 #import <IndexedDB/IDBFactory.idl>
 #import <ServiceWorker/CacheStorage.idl>
+#import <TrustedTypes/TrustedTypePolicyFactory.idl>
 
 // https://html.spec.whatwg.org/multipage/webappapis.html#timerhandler
 typedef (DOMString or Function) TimerHandler;
@@ -43,4 +44,7 @@ interface mixin WindowOrWorkerGlobalScope {
 
     // https://w3c.github.io/ServiceWorker/#cache-storage-interface
     [SecureContext, SameObject] readonly attribute CacheStorage caches;
+
+    // https://w3c.github.io/trusted-types/dist/spec/#extensions-to-the-windoworworkerglobalscope-interface
+    readonly attribute TrustedTypePolicyFactory trustedTypes;
 };

Libraries/LibWeb/TrustedTypes/TrustedTypePolicyFactory.cpp

@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2025, Miguel Sacristán Izcue <miguel_tete17@hotmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#include <LibWeb/TrustedTypes/TrustedTypePolicyFactory.h>
+
+#include <LibJS/Runtime/Realm.h>
+#include <LibWeb/Bindings/Intrinsics.h>
+
+namespace Web::TrustedTypes {
+
+GC_DEFINE_ALLOCATOR(TrustedTypePolicyFactory);
+
+GC::Ref<TrustedTypePolicyFactory> TrustedTypePolicyFactory::create(JS::Realm& realm)
+{
+    return realm.create<TrustedTypePolicyFactory>(realm);
+}
+
+TrustedTypePolicyFactory::TrustedTypePolicyFactory(JS::Realm& realm)
+    : PlatformObject(realm)
+{
+}
+
+void TrustedTypePolicyFactory::initialize(JS::Realm& realm)
+{
+    WEB_SET_PROTOTYPE_FOR_INTERFACE(TrustedTypePolicyFactory);
+    Base::initialize(realm);
+}
+
+}

Libraries/LibWeb/TrustedTypes/TrustedTypePolicyFactory.h

@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) 2025, Miguel Sacristán Izcue <miguel_tete17@hotmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+#pragma once
+
+#include <LibJS/Forward.h>
+#include <LibWeb/Bindings/PlatformObject.h>
+#include <LibWeb/Bindings/TrustedTypePolicyFactoryPrototype.h>
+
+namespace Web::TrustedTypes {
+
+class TrustedTypePolicyFactory final : public Bindings::PlatformObject {
+    WEB_PLATFORM_OBJECT(TrustedTypePolicyFactory, Bindings::PlatformObject);
+    GC_DECLARE_ALLOCATOR(TrustedTypePolicyFactory);
+
+public:
+    [[nodiscard]] static GC::Ref<TrustedTypePolicyFactory> create(JS::Realm&);
+
+    virtual ~TrustedTypePolicyFactory() override { }
+
+private:
+    explicit TrustedTypePolicyFactory(JS::Realm&);
+    virtual void initialize(JS::Realm&) override;
+
+    Vector<String> m_created_policy_names;
+};
+
+}

Libraries/LibWeb/TrustedTypes/TrustedTypePolicyFactory.idl

@@ -0,0 +1,21 @@
+// https://w3c.github.io/trusted-types/dist/spec/#trustedtypepolicyfactory
+[Exposed=(Window,Worker)]
+interface TrustedTypePolicyFactory {
+    [FIXME] TrustedTypePolicy createPolicy(
+        DOMString policyName, optional TrustedTypePolicyOptions policyOptions = {});
+    [FIXME] boolean isHTML(any value);
+    [FIXME] boolean isScript(any value);
+    [FIXME] boolean isScriptURL(any value);
+    [FIXME] readonly attribute TrustedHTML emptyHTML;
+    [FIXME] readonly attribute TrustedScript emptyScript;
+    [FIXME] DOMString? getAttributeType(
+        DOMString tagName,
+        DOMString attribute,
+        optional DOMString? elementNs = "",
+        optional DOMString? attrNs = "");
+    [FIXME] DOMString? getPropertyType(
+        DOMString tagName,
+        DOMString property,
+        optional DOMString? elementNs = "");
+    [FIXME] readonly attribute TrustedTypePolicy? defaultPolicy;
+};

Libraries/LibWeb/idl_files.cmake

@@ -324,6 +324,7 @@ libweb_js_bindings(Streams/TransformStreamDefaultController)
 libweb_js_bindings(Streams/WritableStream)
 libweb_js_bindings(Streams/WritableStreamDefaultController)
 libweb_js_bindings(Streams/WritableStreamDefaultWriter)
+libweb_js_bindings(TrustedTypes/TrustedTypePolicyFactory)
 libweb_js_bindings(SVG/SVGAElement)
 libweb_js_bindings(SVG/SVGAnimatedEnumeration)
 libweb_js_bindings(SVG/SVGAnimatedLength)

Meta/Lagom/Tools/CodeGenerators/LibWeb/BindingsGenerator/IDLGenerators.cpp

@@ -116,6 +116,7 @@ static bool is_platform_object(Type const& type)
         "TextMetrics"sv,
         "TextTrack"sv,
         "TimeRanges"sv,
+        "TrustedTypePolicyFactory"sv,
         "URLSearchParams"sv,
         "VTTRegion"sv,
         "VideoTrack"sv,
@@ -4840,6 +4841,7 @@ using namespace Web::ServiceWorker;
 using namespace Web::StorageAPI;
 using namespace Web::Streams;
 using namespace Web::SVG;
+using namespace Web::TrustedTypes;
 using namespace Web::UIEvents;
 using namespace Web::URLPattern;
 using namespace Web::UserTiming;